How can we provide read-only access for few specific fields of "sys_audit" table to any user?

[SakshiJadhav]

Currently, users either have full access or no access to the "sys_audit" table, with no way to restrict visibility to specific fields. This issue requires configuring field-level read-only ACLs on select fields of the "sys_audit" table so that designated users can view only those specific fields without being able to edit, create, or delete records, and without gaining access to other sensitive fields in the table.

[yashkamde]

Hello @SakshiJadhav ,

Did you tried adding field level ACL?

OR Create a new ACL per field :

• Type: record
• Operation: read
• Table: sys_audit
• Field: sys_audit.fieldname

Then Add the role that should see that field..

Also Refer this might help :

Audit Records: add READ rights to another users 

If my response helped mark as helpful and accept the solution.

[vaishali231]

Hey @SakshiJadhav 

You can achieve this using field-level Read ACLs on the sys_audit table. Grant the designated role read access only to the required fields, while keeping Create, Write, and Delete access restricted.

Make sure the table-level Read ACL is also configured appropriately, as field-level ACLs work in addition to table-level access. Avoid relying only on UI policies or field visibility, since those don't provide server-side security.

You can configure:

*************************************************************************************************************************************

If this response helps, please mark it as Accept as Solution and Helpful.

Doing so helps others in the community and encourages me to keep contributing.

Regards

Vaishali Singh
Linkedin - https://www.linkedin.com/in/vaishali-singh-2273361bb