# Field-level security and View All Fields

*Platform Sharing and Visibility Architect Study Guide · Permissions to Standard Objects, Custom Objects, and Fields · Last updated October 26, 2026 · https://www.certifyforce.com/study-guide/platform-sharing-and-visibility-architect/permissions-to-standard-objects-custom-objects-and-fields/field-level-security-and-view-all-fields*

How Read and Edit field permissions protect a field in every interface while page layouts only shape detail and edit pages, which fields field-level security can't fully control, when the View All Fields object permission fits, and how to manage and audit field permissions at scale.

- Certification: Salesforce Platform Sharing and Visibility Architect
- Exam section: Permissions to Standard Objects, Custom Objects, and Fields
- Study guide: https://www.certifyforce.com/study-guide/platform-sharing-and-visibility-architect

**Official exam objective:**

> Given a scenario, recommend the correct level of field permissions needed to provide the appropriate access to a set of users.

## What the exam expects

- Choose Read and Edit, Read, or no access on a field so it holds in pages, list views, reports, sites and APIs, and say why a page layout alone doesn't.
- Predict the result when page layout and field-level security disagree, and use layouts for record-type differences.
- Spot fields field-level security can't fully control: formula, roll-up summary, universally required, master-detail, shared activity fields and lookup names.
- Recommend View All Fields when a persona needs every field on one object, and know what it doesn't change.
- Manage and audit field permissions at scale with permission sets, Set Field-Level Security and FieldPermissions queries.

Key terms: **field-level security** (field permissions: whether a user can view or edit a field); **universally required field** (required in the field definition); **View All Fields** (object permission revealing every field on one object); **FieldPermissions** (API object holding field permissions per permission set).

## Key facts

| Fact | Detail | Source |
|---|---|---|
| Field-level security scope | Pages, related lists, list views, reports, imports, Experience Cloud sites, APIs | [Field Permissions](https://help.salesforce.com/s/articleView?id=platform.users_profiles_field_perms.htm&language=en_US&type=5) |
| Layout versus field-level security | Most restrictive setting always applies | [Field Permissions](https://help.salesforce.com/s/articleView?id=platform.users_profiles_field_perms.htm&language=en_US&type=5) |
| Permissions to set field-level security | Manage Profiles and Permission Sets and Customize Application | [Set Field Permissions in Permission Sets and Profiles](https://help.salesforce.com/s/articleView?id=platform.users_profiles_fls.htm&language=en_US&type=5) |
| Formula field permissions | Only PermissionsRead can be inserted or updated | [FieldPermissions (Object Reference)](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_fieldpermissions.htm) |
| No FieldPermissions rows | OwnerId, master-detail and universally required custom fields | [FieldPermissions (Object Reference)](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_fieldpermissions.htm) |
| Clearing Read | A FieldPermissions record without PermissionsRead is deleted | [FieldPermissions (Object Reference)](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_fieldpermissions.htm) |
| Roll-up summary | Includes detail fields hidden by field-level security | [Roll-Up Summary Field](https://help.salesforce.com/s/articleView?id=platform.fields_about_roll_up_summary_fields.htm&language=en_US&type=5) |
| View All Fields in the API | PermissionsViewAllFields from API version 63.0 | [ObjectPermissions (Object Reference)](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_objectpermissions.htm) |
| View All Fields (Global) | Available only for the Platform Integration User | [View All and Modify All Permissions Overview](https://help.salesforce.com/s/articleView?id=platform.users_profiles_view_all_mod_all.htm&language=en_US&type=5) |
| Field Accessibility page | Can't check access for permission sets | [Verify Access for a Particular Field](https://help.salesforce.com/s/articleView?id=platform.checking_field_accessibility_for_a_particular_field.htm&language=en_US&type=5) |

## Check yourself

- Why does a field that is required on the layout but Read in field-level security show as read-only?
- When would a FieldPermissions query return no rows for a field users clearly see?
- Which permission shows every field on one object without per-field settings while respecting sharing?
- Why can the Field Accessibility page show a field as hidden for users who can see it?

## Sources

- [Field Permissions](https://help.salesforce.com/s/articleView?id=platform.users_profiles_field_perms.htm&language=en_US&type=5)
- [What Determines Field Access?](https://help.salesforce.com/s/articleView?id=platform.customize_fieldaccess.htm&language=en_US&type=5)
- [Set Field Permissions in Permission Sets and Profiles](https://help.salesforce.com/s/articleView?id=platform.users_profiles_fls.htm&language=en_US&type=5)
- [FieldPermissions (Object Reference)](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_fieldpermissions.htm)
- [View All and Modify All Permissions Overview](https://help.salesforce.com/s/articleView?id=platform.users_profiles_view_all_mod_all.htm&language=en_US&type=5)
- [Object Permissions](https://help.salesforce.com/s/articleView?id=platform.users_profiles_object_perms.htm&language=en_US&type=5)
- [ObjectPermissions (Object Reference)](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_objectpermissions.htm)
- [Permission Sets](https://help.salesforce.com/s/articleView?id=platform.perm_sets_overview.htm&language=en_US&type=5)
- [Verify Access for a Particular Field](https://help.salesforce.com/s/articleView?id=platform.checking_field_accessibility_for_a_particular_field.htm&language=en_US&type=5)
- [Roll-Up Summary Field](https://help.salesforce.com/s/articleView?id=platform.fields_about_roll_up_summary_fields.htm&language=en_US&type=5)
- [Troubleshoot Field Access Issues](https://help.salesforce.com/s/articleView?id=platform.admin_insufficient_privileges_field.htm&language=en_US&type=5)
- [Object Relationships Overview](https://help.salesforce.com/s/articleView?id=platform.overview_of_custom_object_relationships.htm&language=en_US&type=5)
- [Improve Field-Level Security Settings (Trailhead)](https://trailhead.salesforce.com/content/learn/modules/data_security/data_security_fields)

## About the full unit

The "Core concepts", "Exam traps" and "Worked scenario" sections of this unit, its 16 linked practice questions, and unlimited timed mock exams are included with the Platform Sharing and Visibility Architect pack (USD $19): https://www.certifyforce.com/practice-exams