Changing the priority of account access (FileMaker Pro only)

When a user opens a file, FileMaker clients use the first account access entry in the priority (authentication) order that either matches the user’s account name or that finds the user’s account name in the group. All account access entries that follow the first one are ignored. Therefore, it’s important to set the priority for account access when one or more of the situations below exist. Otherwise, the wrong account access may be used to open the file. See Creating and editing account access.

A file could contain more than one account access entry that authenticates the same user when:

  • there is Claris ID or external identity provider (IdP) account access for an individual user, and for one or more groups that the same user is in

  • there is FileMaker file account access for an individual user, and external server account access for a group that contains a user with the same account name (this doesn't apply to AD FS groups)

  • two or more groups with external server account access contain the same user (this doesn't apply to AD FS groups)

  • for AD FS and OAuth identity providers that support groups:

    • there is account access for an individual user, and for one or more groups that the same user is in

    • two or more groups with account access contain the same user

The priority is an issue only under the specific circumstances above. If you are using account types for individual users, priority is not a concern, because each account access entry must have a unique name.

To change the priority of account access:

  1. Choose File menu > Manage > Security.

  2. Drag each account access name into the order you want it to be authenticated.

Notes 

  • You must have full access privileges to change priority.

  • Claris Pro: Even though the priority order can be changed, it has no effect because each account access entry must have a unique name. The Default account is always last in priority order to reflect that it is used to authenticate the user only if there is no matching account access entry in the list. See About the creator's account and Default account (Claris Pro only).

Related topics