Field Level Controls

Field Level Controls let you choose which fields DataGrail includes when processing Access and Deletion requests for an integration. Most fields are included by default, though some are excluded by default depending on the integration. You can exclude or re-include specific fields on a per-integration basis without affecting other connected integrations.

Super Admin and Connections Manager users can configure Field Level Controls. Access and Deletion configurations are independent of each other, so you can exclude a field from Deletion while still including it on Access, or vice versa.

Deletion Fields Control the Access Phase

The Deletion column controls which fields DataGrail collects during the access phase of a Deletion request, when data is gathered for review before it's deleted. It does not change which records get deleted.

Accessing Field Level Controls

The integration must be connected before the Field Level Controls tab is available.

1. Navigate to Integrations in the left sidebar of DataGrail.
2. Select the integration you want to configure.
3. Select the Field Level Controls tab.

Viewing Configuration

The Field Level Controls tab displays a table of fields grouped by category (e.g. users, logs), with Access and Deletion columns showing whether each field is currently included in that request type.

The table uses the following indicators to show a field's status:

Indicator	Meaning
Checkmark	The field is included in the request type
Dash	The field is excluded from the request type

Each category row shows a running count of selected fields, such as "17/18 Selected", so you can quickly see how many fields in that category are currently included.

Required Fields

Some fields are required by the integration and cannot be excluded. Required fields appear in the table with their checkboxes disabled.

The integration's schema is fetched in real time whenever you open the Field Level Controls tab. Select Refresh Fields to re-fetch the schema on demand and pick up any recent changes.

Editing Configuration

Select Edit Controls to open an editable view of the field table.

1. Select Edit Controls.
2. Use the search bar to locate a specific field, if needed.
3. Select or clear the Access and Deletion checkboxes for an individual field, or select a category's checkbox to update every field within it at once.
4. Select Save to review your changes.

When only some fields within a category are selected, the category's checkbox displays an indeterminate state to reflect the partial selection.

If you want to undo your changes, select Reset to Default to restore all fields in the integration to their initial state.

Confirming Changes

Before your changes are saved, a confirmation dialog summarizes the pending updates as Enabling and Disabling lists, each with a field count.

Select Confirm to apply the changes, or Cancel to return to the editable view without saving.

Changes Apply Going Forward Only

Field Level Control changes apply as soon as they're saved, but they do not apply retroactively. Requests that have already started processing use the configuration that was in place when they began.

Audit Log

Every change to Field Level Controls is recorded in the audit log, whether made by a user or attributed to the system, and includes the action taken, the affected field, the capability (Access or Deletion), and a timestamp. These entries are available in both the read-only and editable views. For example:

• "Emma Morgan selected firstName for deletion capability"
• "Alex Rivera deselected phoneNumber for access capability"

SIEM Audit Log Export

If you have SIEM Audit Log Export configured, Field Level Control changes also appear under the Integration Connection Log category.