{"id":132203,"date":"2025-08-07T07:00:00","date_gmt":"2025-08-07T14:00:00","guid":{"rendered":""},"modified":"2025-08-07T08:19:10","modified_gmt":"2025-08-07T15:19:10","slug":"data-protection-in-dataverse","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/power-platform\/blog\/2025\/08\/07\/data-protection-in-dataverse\/","title":{"rendered":"\ud83d\udd10 Strengthen Data Protection in Dataverse"},"content":{"rendered":"\n

As organizations increasingly rely on Microsoft Dataverse to manage sensitive business data, the need for robust security controls has never been greater. In the latest wave of updates, Dataverse introduces key improvements to:<\/p>\n\n\n\n

    \n
  1. Prevent data leaks and data exfiltration<\/li>\n\n\n\n
  2. Fine-tune data visibility while maintaining performance and compliance.\u00a0<\/li>\n<\/ol>\n\n\n\n

    \ud83d\udee1\ufe0f Step 1:\u00a0 Prevent data leaks with secured column masked fields\u00a0<\/h2>\n\n\n\n

    Dataverse now supports column-level security with masking<\/strong>, allowing organizations to restrict access to sensitive fields such as Social Security Numbers, account numbers, or government IDs. This feature ensures that unauthorized users see only masked values, both in forms and exported data.  <\/p>\n\n\n\n

    Admins can define Secured Masking Rules<\/strong> using regular expressions to control what part of a field is visible. For example, you can show only the last four digits of an SSN. These rules apply to the server side, ensuring consistent enforcement across environments and export scenarios. <\/p>\n\n\n\n

    \"Define<\/figure>\n\n\n\n

    Additionally, audit logs remain available for masked columns, enabling security teams to monitor access and detect anomalies.\u00a0<\/p>\n\n\n\n

    \"Audit<\/figure>\n\n\n\n

    \ud83d\udeab Step 2: Prevent Data Exfiltration by Controlling App Access\u00a0<\/h2>\n\n\n\n

    To combat unauthorized data exports, Dataverse introduces App Access Control<\/strong>, a feature that lets admins define which apps are allowed to run in an environment.  <\/p>\n\n\n\n

    This control is enforced at the authentication layer, validating app IDs against an approved list. Whether users access Dataverse via Dynamics 365 Sales or a custom app, only permitted apps can interact with the environment. Admins can also run audit mode to identify commonly used apps before enforcing restrictions.\u00a0Here is an example of preventing Excel desktop running in your environment:<\/p>\n\n\n\n

    \"App<\/figure>\n\n\n\n

    This feature is especially valuable for regulated industries where data leakage risks must be tightly managed.\u00a0<\/p>\n\n\n\n

    \ud83d\udc65 Step 3: Role-Based View Management with Tailor Grid Views by Security Role\u00a0<\/h2>\n\n\n\n

    Dataverse now allows makers and admins to assign system views to specific security roles<\/strong>, ensuring users see only the views relevant to their role. <\/p>\n\n\n\n

    This enhancement brings parity with role-based form access and helps reduce clutter in the UI. Makers can configure view visibility directly in the Maker Portal, while end users can share personal views with their teams. This granular control improves usability and user productivity.  <\/p>\n\n\n

    \"Dataverse<\/figure>\n\n\n\n

    \ud83e\udde9 Step 4: Filtered Views Security for C2 System Users\u00a0<\/h2>\n\n\n\n

    Dataverse introduces a filtered view-based security model<\/strong> that enables row-level access control based on column values. <\/p>\n\n\n\n

    For example, a user may only access records where the \u201cCity\u201d column equals \u201cRedmond\u201d or \u201cSeattle.\u201d This model is particularly useful for scenarios where traditional record ownership doesn\u2019t apply, such as Power Pages C2 users. <\/p>\n\n\n\n

    Admins can define predicates and associate them with security roles, allowing CRUD operations only on records that match the filter criteria. This model is already in use by Dynamics 365 Finance and Operations and Power Pages and is expanding to other workloads. <\/p>\n\n\n\n

    \ud83d\udca1 Get Started Today<\/h2>\n\n\n\n

    Together, these features represent a significant leap forward in Dataverse\u2019s security posture. They empower organizations to: <\/p>\n\n\n\n