Home >> Articles >> Salesforce Field Level Security Summer 26

Salesforce Field Level Security Summer 26

Salesforce Object Manager Field Access tab showing field level security across profiles and permission sets

Any Salesforce admin who has ever done a field-level security audit knows the process: open a profile, navigate to object settings, find the field, note the access, repeat for every other profile, then repeat for every permission set. It is tedious, error-prone, and nobody does it as often as they should. Summer '26 adds a Field Access tab directly to Object Manager that shows the full picture in one place.

What the Field Access tab shows

At the bottom of each object in Object Manager, a new Field Access tab lists every field on the object alongside a consolidated view of exactly how access is granted — across all profiles and permission sets — in a single interface.

Previously, getting this view required navigating each profile individually, cross-referencing permission sets separately, and building a mental or spreadsheet-based picture of who can see and edit which field. For a mid-sized org with 20 profiles and 40 permission sets, that process takes hours and is almost guaranteed to miss something.

The Field Access tab shows it in one view. One object, every field, all access configurations visible simultaneously.

Setup → Object Manager → Opportunity → Field Access
Opportunity Standard Object
Details
Fields & Relationships
Page Layouts
Validation Rules
Field Access New
All profiles and permission sets — one view
Field LabelProfile / Permission Set AccessGranted Via
Amount✓ Read / Edit Sales Rep, Sales ManagerProfile: Sales Rep · Profile: Sales Manager
Annual Contract Value✓ Read / Edit Finance, Admin
📖 Read only Sales Rep
Perm Set: Finance View · Profile: Admin
Internal Deal Notes✓ Read / Edit Sales Manager, Admin
✗ No access Sales Rep, Support
Perm Set: Manager Access · Profile: Admin
Stripe Subscription ID📖 Read only Finance, Admin
✗ No access Sales Rep, Support, CS
Perm Set: Finance View · Profile: Admin
Read-only in Summer '26. Edit permissions via Profile or Permission Set settings.

Why this matters more than it sounds

Field-level security is one of the most common gaps in Salesforce org audits. Orgs grow, permission sets multiply, profiles get copied from other profiles, and nobody has a clear picture of who can read or edit which field. Compliance audits, security reviews, and new admin onboarding all require this visibility — and getting it has always required more effort than it should.

The Field Access tab does not change permissions. It makes the existing permissions visible and auditable at a glance. That distinction matters for compliance contexts specifically: the audit requirement is often to demonstrate that someone reviewed field access, not that they changed it. Summer '26 makes that review faster, more reliable, and easier to document.

Three situations where this saves significant time

✗ Before Summer '26
1
Open Profile 1 → Object Settings → navigate to field → note access level
~3 min per profile
2
Repeat for all 20 profiles. Build a spreadsheet.
~60 minutes
3
Open each permission set and check the same field. Add to spreadsheet.
~30 min for 40 perm sets
4
Cross-reference manually. Identify gaps. Probably miss one.
~20 minutes
2+ hours. Error-prone. Often skipped.
✓ With Summer '26 Field Access tab
1
Open Object Manager → select object → click Field Access tab
~30 seconds
2
All fields listed. All profiles and permission sets in a single view.
Immediate
3
Search or scroll to the specific field. Access visible at a glance.
~2 minutes
4
Screenshot or export for the audit documentation. Done.
~5 minutes total
Under 10 minutes. Reliable. Auditable.
Where the Field Access Tab Saves Significant Time
🔒
Before a new team accesses sensitive account data
When a new department or external partner is being onboarded to Salesforce, reviewing field-level security on Account, Contact, or Opportunity objects is a required step. The Field Access tab makes this a 10-minute review instead of an afternoon, and makes the outcome documentable.
Time saving: ~2 hours → ~10 minutes per object reviewed
📋
GDPR and HIPAA-adjacent field visibility audits
Demonstrating controlled access to specific fields — email addresses, phone numbers, health-related custom fields — requires showing who has access and how it is granted. The Field Access tab produces that view without a manual cross-referencing exercise, making it audit-ready by design.
Compliance requirement: access visibility is demonstrable in one screenshot
🔍
Debugging a field not visible for a specific user
A rep reports a field is missing from their record page. Previously: check profile → check permission sets → check page layout. With Field Access tab: search for the field, see all access configurations simultaneously, identify the gap in under 2 minutes.
Debugging time: ~20 minutes → ~2 minutes

What it does not do yet

The Field Access tab is read-only in the initial Summer '26 implementation. You can view field access across all profiles and permission sets, but you cannot edit permissions from this interface. Changes still require navigating to the profile or permission set and making edits there.

Worth watching: The ability to edit permissions from the same view — which would make it genuinely powerful — is the likely Winter '27 addition. The visibility improvement is real and significant now. Editing from the same surface is the logical next step.

Field-level security has always been one of the hardest things to audit in a Salesforce org. Summer '26 does not solve the permissions complexity — it makes it visible. That is the starting point for everything else.

Share:
Free Consultation

Ready to solve your Salesforce challenges?

Get a free consultation with our certified Salesforce experts. No commitment required.

See our packages →