---
title: "Manage segregation of data"
slug: "manage-segregation-of-data"
description: "Restrict user access to specific VendTable and CustTable records, ensuring data privacy and compliance with easy activation and deactivation steps."
tags: ["Task", "Security and Compliance Studio", "SCS"]
updated: 2026-03-20T10:58:16Z
published: 2026-03-20T17:44:34Z
canonical: "docs.staedean.com/manage-segregation-of-data"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.staedean.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Manage segregation of data

You can restrict a user’s access to specific records in the **VendTable** and **CustTable**. A user with access to selected vendors or customers cannot view records of other vendors or customers.

When the restriction is active, [Extensible Data Security (XDS) policies](https://learn.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/sysadmin/extensible-data-security-policies) apply. These policies also constrain related tables. For example, if a user cannot access a customer, the customer’s transactions are also inaccessible.

### Steps

1. **Go to Security and compliance** > **Setup** > **Segregation of data**.
2. Click **Edit**.
3. In users the list, find and select the desired user.
4. Sub-task: Restrict access to vendor data.
  1. In the **Vendor** section, click **Add**.
  2. Define to which company the restriction applies.

In the **Company** field, enter or select a value.
  3. Define the vendor whose data the user can access.

In the **Vendor** field, enter or select a value.
  4. Click **Save**.
  5. Activate the access rule to apply it.

Click **Activate**.

> [!NOTE]
> **Note**
> 
> To deactivate an access rule, select it, and click **Deactivate**.
5. Sub-task: Restrict access to customer data.
  1. In the **Customer** section, click **Add**.
  2. Define to which company the restriction applies.

In the **Company** field, enter or select a value.
  3. Define the customer whose data the user can access.

In the **Customer** field, enter or select a value.
  4. Click **Save**.
  5. Activate the access rule to apply it.

Click **Activate**.

> [!NOTE]
> **Note**
> 
> To deactivate an access rule, select it, and click **Deactivate**.

> [!NOTE]
> **Notes**
> 
> If no access restrictions are defined or active, the user can access all customer and vendor data.