How restrict certain basic or master data by company

Hi ​@PDharmasena10 

Acumatica provides basic features to restrict users by groups, such as Customer, Vendor, Inventory Item, Warehouse, and so on, within Row-Level Security. Have you explored these standard restriction groups yet?

Best Regards,

NNT

Hi ​@nhatnghetinh;
We have implemented row level security and it does not cover the requirement. Row level security looks at only specified data, does not cover the staff and the sales persons. 

To restrict basic or master data by company in Acumatica, you have several approaches depending on your specific requirements:

## Company Mask and Group Mask

The most common method is using **CompanyMask** and **GroupMask** fields on your DAC records. These control data visibility across companies:

```csharp

[PXDBInt]

[PXUIField(DisplayName = "Company Mask")]

public virtual int? CompanyMask { get; set; }

[PXDBInt]

[PXUIField(DisplayName = "Group Mask")]

public virtual int? GroupMask { get; set; }

```

## Access Rights Framework

Configure access rights through the system's built-in security:

- Navigate to **System Management > Access Rights > Restriction Groups**

- Create restriction groups that limit access to specific records

- Assign users to appropriate restriction groups

- Apply these restrictions to your master data screens

## Custom Restrictions via Graph Extensions

For more granular control, implement custom filtering in graph extensions:

```csharp

public class YourMasterDataMaint_Extension : PXGraphExtension

{

public override void Initialize()

{

Base.YourView.WhereAnd>>>();

}

}

```

## Branch-Level Restrictions

If using multi-branch setup, leverage branch restrictions:

- Add `BranchID` fields to your DACs

- Use `[Branch]` attribute for automatic branch filtering

- Configure branch access in user profiles

The key is determining whether you need company-level isolation (separate data per company) or shared data with controlled access. Company masks work well for shared master data with controlled visibility, while separate company databases provide complete isolation.

Choose the approach that aligns with your business requirements and compliance needs.

---

Drafted by AcuDev (AI) · Reviewed by Kevin Bibelhausen, Studio B

AcuOps — AI-powered environment management for Acumatica · b.studio