--- schema_version: "1" id: 5b45d8bf9485377ed259be0930305a9e62ca37ca7f5a9ea02bbaf22125d9b279 title: FieldRestrictionRule collection: legacydeveloper version: current locale: en-us portal_url: https://docs.salesforce.com/legacydeveloper/current/en-us/api_meta/meta_fieldrestrictionrule.md canonical_url: https://developer.salesforce.com/docs/atlas.en-us.api_meta.meta/api_meta/meta_fieldrestrictionrule.htm source_site: developer.salesforce.com content_type: documentation content_hash: 380607264e00ed7d82e3331de8869f373edd3ed296a9ad1a29e57a5dfbb661c2 description: Represents a field visibility rule that controls whether a field is visible to a user, based on the field’s inclusion in a field set. If Enhanced Personal Information Management setting was enabled before Spring ’22, field visibility is based on the field’s compliance categorization. This type extends the Metadata metadata type and inherits its fullName field. --- # FieldRestrictionRule Represents a field visibility rule that controls whether a field is visible to a user, based on the field’s inclusion in a field set. If Enhanced Personal Information Management setting was enabled before Spring ’22, field visibility is based on the field’s compliance categorization. This type extends the Metadata metadata type and inherits its fullName field. ![Important](https://developer.salesforce.com/docs/atlas.en-us.api_meta.meta/api_meta/images/icon_note_important.png) #### Important Where possible, we changed noninclusive terms to align with our company value of Equality. We maintained certain terms to avoid any effect on customer implementations. ## File Suffix and Directory Location FieldRestrictionRule components have the suffix .rule and are stored in the fieldRestrictionRules folder. ## Version FieldRestrictionRule components are available in API version 52.0 and later. ## Special Access Rules - To access this type, you must have the Manage Sharing permission. - To create and manage Employee field visibility rules, you must be assigned a Workplace Command Center permission set license and the Provides access to Workplace Command Center features system permission. - To create and manage User field visibility rules, you must enable Digital Experiences and the Enhanced Personal Information Management feature. ## Fields
Field Name Field Type Description
active boolean Indicates whether the rule is active (true) or not (false). The default value is false.
classification string[] Required. The data classification compliance categorization or field set that is targeted by the rule. The rule applies to fields that are marked with this categorization or included in this field set. If you enabled Enhanced Personal Information Management before Spring ‘22 (API version 54.0), you can use Salesforce's default compliance categorization values or values that you add yourself. If you enabled Enhanced Personal Information Management after Spring ‘22 (API version 54.0), use the PersonalInfo_EPIM field set or a field set that you add yourself.
classificationType ClassificationType (enumeration of type string) The type of classification method used in your org. If you enabled Enhanced Personal Information Management before Spring ‘22 (API version 54.0), use ComplianceCategory. If you enabled Enhanced Personal Information Management after Spring ‘22, use FieldSet.
  • ComplianceCategory—
  • FieldSet—
The default value is ComplianceCategory. Available in API version 54.0 and later.
description string Required. The description of the rule.
enforcementType EnforcementType (enumeration of type string) Required. The type of rule. Possible values are:
  • FieldRestrict—Field visibility rule. Only this value is valid.
  • Restrict—Do not use.
  • Scoping—Do not use.
masterLabel string Required. The name of the rule.
recordFilter string Required. The criteria that determine which fields are visible to the specified users. For example, the field can check if the logged-in user matches the Employee’s ID.
targetEntity string Required. The object for which you're creating the rule. Only the Employee and User objects are supported.
userCriteria string Required. The users that this rule applies to, such as all active users or users with a specified role or profile.
version int Required. The rule's version number.
## Declarative Metadata Sample Definition The following is an example of a FieldRestrictionRule component, which uses the ComplianceCategory classification type. The classification value is one of Salesforce's default compliance categorization values, but you can create a custom compliance categorization value to use instead. true PII ComplianceCategory Is Owner of Employee FieldRestrict Is Owner Field Restriction Rule OwnerId = $User.Id Employee $User.IsActive = true 1 The following is an example of a FieldRestrictionRule component, which uses the FieldSet classification type. The classification value is Salesforce's default field set for personal information, but you can create a field set to use instead. true PersonalInfo\_EPIM FieldSet Is Owner of Employee FieldRestrict Is Owner Field Restriction Rule OwnerId = $User.Id Employee $User.IsActive = true 1 The following is an example package.xml that references the previous definition. \* FieldRestrictionRule 52.0