How to hide sensitive field from Admin without restricting administrative access?

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Azraelz
    Junior Member
    • Oct 2025
    • 2

    #1

    How to hide sensitive field from Admin without restricting administrative access?

    My users want admins to not have access to read those sensitive fields, although admin still need to have access to the administration menu for the purpose of updating features and system management.
  • rabii
    Active Community Member
    • Jun 2016
    • 1337

    #2
    You need to write code or use third party extension - check this out below from eymen-elkum


    Espocrm, Description: 1. Add some permissions to Admin User,The user can control the program through these permissions only. Activation Extention:users -> detail || edit -> Limited Admin Permissions. Read information about the extension . Release notes are available here.
    Rabii
    EspoCRM & Web Dev

    🔗 See what I’ve built for EspoCRM

    Comment

    • Azraelz
      Junior Member
      • Oct 2025
      • 2

      #3
      any idea which file i can edit for custom it?

      Comment

      • rabii
        Active Community Member
        • Jun 2016
        • 1337

        #4
        It dependents on what you want to achieve - it is not just one file you will need to dive into espocrm codebase and figure out how it work then you can customise it. an alternative is to use metadata to define scope access level / field access level to the admin.

        Rabii
        EspoCRM & Web Dev

        🔗 See what I’ve built for EspoCRM

        Comment

        • jamie
          Senior Member
          • Aug 2025
          • 123

          #5
          Originally posted by Azraelz
          My users want admins to not have access to read those sensitive fields, although admin still need to have access to the administration menu for the purpose of updating features and system management.
          genraly its been that if you don't trust your system admin you have bigger problems, but you could try something with a complicated teams setup

          Comment

          Working...