หมายเหตุ
การเข้าถึงหน้านี้ต้องได้รับการอนุญาต คุณสามารถลอง ลงชื่อเข้าใช้หรือเปลี่ยนไดเรกทอรีได้
การเข้าถึงหน้านี้ต้องได้รับการอนุญาต คุณสามารถลองเปลี่ยนไดเรกทอรีได้
To classify the fields that hold sensitive or personal data, a developer can set the DataClassification property on fields in AL code.
As a customer, you can add a second level of classification by specifying sensitivity levels for the data you store in standard and custom fields. Classifying data sensitivity helps ensure that you know where you keep personal data in your system, and makes it easier to respond to requests from data subjects. For example, if a contact or customer asks you to export their personal data. Learn more in Responding to requests about personal data.
Important
Microsoft is providing this Data Sensitivity Classification feature as a matter of convenience only. It's your responsibility to classify the data appropriately and comply with any laws and regulations that are applicable to you. Microsoft disclaims all responsibility towards any claims related to your classification of the data.
The following table describes data sensitivity levels you can assign.
| Sensitivity | Description |
|---|---|
| Unclassified | A sensitivity level hasn't been assigned to the field. |
| Sensitive | Information about a data subject's racial or ethnic origin, political opinions, religious beliefs, involvement with trade unions, physical or mental health, sexuality, or details about criminal offenses. |
| Personal | Information that can be used to identify a data subject, either directly or in combination with other data or information. |
| Company Confidential | Business data that you use for accounting or other business purposes, and don't want to expose to other entities. For example, data such as ledger entries. |
| Normal | General data that doesn't belong to any other categories. |
Classify fields in the data classification worksheet
Classifying the sensitivity of a large number of fields one by one takes a long time. To speed up the process, classify fields in bulk, and then fine-tune classifications for specific fields. Use the Data Classification Worksheet page. Your permissions must allow you to view and change data sensitivity classifications.
Select Search (Alt+Q)
in the upper-right corner, enter Data Classification Worksheet, and then choose the related link.
Important
When you first open the Data Classification Worksheet page, Business Central populates the fields for the current company. Evaluation companies can have sample classifications. To classify fields with the assisted setup guide, choose Set Up Data Classifications. To add fields introduced after the last synchronization, choose Find New Fields.
For example, the Data Classification Worksheet page lets you do things like:
- Use the Data Classification assisted setup guide to export your fields to an Excel worksheet where you can bulk classify them. Using the Excel worksheet is useful if you're collaborating with a Microsoft partner. After you update the worksheet, use the guide to import and apply the classifications. You can also use the guide to classify fields manually.
- Choose a field and then filter the list to find similar fields that are likely to belong to the same classification as the field you based the search on.
- Investigate a field by viewing its contents. Select a single
CodeorTextfield, and then choose Show Field Content.
Tip
We defined sample sensitivity classifications for the tables and fields in the Cronus demonstration company. You can use those classifications as inspiration when you classify your own tables and fields.
Mask or show sensitive data in fields
You can protect sensitive information by masking field values on the screen. Masking helps protect sensitive data, such as personal identifiers, financial details, or confidential notes, from casual observation or shoulder surfing. For example, you might want to mask values when people work in shared or open work environments.
The following image shows a masked field value and highlights the reveal button.
Note
Masking provides lightweight, UI-layer-only information protection only. The unmasked data transfers to the web browser anyway.
Additional information:
- Masking isn't supported in repeater controls or on
ConfigurationDialogpages. - The reveal button renders on the control that lets you toggle between mask and show states.
- Masking works on desktop and mobile devices.
Note
In versions where masking is optional, enable Introduce UI support for masking sensitive data on the Feature Management page. Learn more in Introduce UI support for masking sensitive data feature key.
Masking was introduced in 2025 release wave 2. The availability of the feature key depends on your version.
Information about masking for developers
The MaskType field-level property allows you to hide values in supported fields. Learn more in MaskType property.
When you apply the property, Business Central masks the field's value by default, and only shows the value when you choose the reveal button in the field.
The MaskType property is a field-level property. You can use the property on the following types of fields:
CodeTextDecimalIntegerBigInteger
You define the property as an enum MaskType with the following values:
None- Shows the field value by default. Masking isn't applied.Concealed- Masks the field value in the user interface by default.
Note
You can't define the MaskType property together with the ExtendedDatatype property set to Masked.