Glossary
This glossary defines key terms used throughout the Advanced Cloud Security documentation.
A
Action Control
A security feature that controls the visibility or enabled state of page actions (buttons, menu items) based on user assignments.
ACS (Advanced Cloud Security)
The Advanced Cloud Security extension for Microsoft Dynamics 365 Business Central. Provides field-level security, data-level security, and compliance features.
ACS EFQ Permission Set
The permission set included with ACS that grants access to all ACS administration and setup pages. Assigned to administrators who configure ACS. Regular end users do not need this permission set — security is evaluated automatically through the generated extension's inherent permissions.
Approval Rule
A compliance configuration that specifies which field changes require approval before being committed to the database.
Approval Workflow
The process by which changes to tracked fields are submitted for approval, reviewed by approvers, and either approved or rejected.
Approver
A user designated to review and approve or reject pending change requests in the compliance module.
Approver Group
A collection of approvers that can be assigned to approval rules. Any member of the group can approve requests assigned to the group.
Assignment
The association of a security feature with a user, security group, or permission set, determining who is affected by that feature.
B
Build Phase
The first phase of ACS setup where administrators define security features, specify which fields and actions to control, and configure compliance tables.
Business Central
Microsoft Dynamics 365 Business Central, the enterprise resource planning (ERP) system that ACS extends.
C
Combined (Conflict Resolution)
A conflict field resolution mode that combines the original visibility expression with the ACS security expression using AND logic.
Compliance Log
A permanent record of all field changes made to tracked tables, providing an audit trail for compliance purposes.
Compliance Module
The portion of ACS that provides field change tracking, approval workflows, and audit logging capabilities.
Compliance Table
A database table configured for compliance tracking. Changes to specified fields in these tables can be logged and may require approval.
Conflict Field
A field that already has a visibility or editability expression in the base application or another extension, requiring special handling by ACS.
Create Extension
The ACS function that generates the Business Central extension code implementing the configured security rules.
D
Data-Level Security
Security that controls which records (rows) a user can see in a table, implemented through data filters.
Data Filter
A filter expression that restricts which records a user can access in a table based on field values.
E
Editability
A field property that determines whether a user can modify the field's value. ACS can control editability based on user assignments.
Effective Security
A view showing all security features that apply to a specific user, including features inherited from security groups and permission sets.
F
Field-Level Security
Security that controls whether specific fields are visible or editable to users, without modifying the underlying data structure.
Field Tracking
A compliance feature that records changes to specified fields, capturing old value, new value, user, and timestamp.
Filter Code
A named placeholder in a data filter expression that is replaced with a user-specific value at runtime.
G
Grant Access
A data filter mode where users see no records by default except those matching the filter criteria.
H
Handle Conflict Fields
The ACS function for managing fields that have existing visibility or editability expressions from other sources.
L
License
The authorization to use ACS features. Different license tiers provide different feature sets.
M
Main Menu
The central ACS administration page showing the three-phase setup process and key metrics.
O
Override (Conflict Resolution)
A conflict field resolution mode where the ACS security expression completely replaces the original expression.
P
Permission Set
A Business Central object that defines a set of permissions. ACS can assign security features to permission sets.
Preserve (Conflict Resolution)
A conflict field resolution mode that keeps the original expression unchanged and doesn't apply ACS security.
Phase
One of the three stages in the ACS setup process: Build, Configure Compliance, and Assign Security.
R
Restrict Access
A data filter mode where users see all records by default except those matching the filter criteria.
S
Security Extension
The Business Central extension generated by ACS that implements the configured security rules.
Security Feature
A named collection of security rules in ACS that can be assigned to users, groups, or permission sets.
Security Group
A Business Central group that can have ACS security features assigned to it. All members inherit the assigned features.
T
Three-Phase Setup
The ACS configuration methodology: (1) Build/Define, (2) Configure Compliance, (3) Assign Security.
Tracked Field
A field in a compliance table that has change tracking enabled, causing all modifications to be recorded in the compliance log.
U
User Filter
A user-specific value assigned to a filter code, enabling dynamic data filtering based on individual user characteristics.
V
Visibility
A field property that determines whether a user can see the field on a page. ACS can control visibility based on user assignments.