About accounts, privilege sets, and extended privilegesIf you host files on FileMaker Server, you can create External Server accounts that obtain authentication information from an authentication server such as an Apple OpenDirectory or Windows Domain. This allows you to use a centrally managed user directory that may already be in use to manage access to other network resources such as file servers. See Creating accounts that authenticate via an external server.A privilege set specifies a level of access to a database file. When you create a privilege set, there are many options available that you can use to limit database access, such as which layouts are viewable, which menus are available, and whether printing is permitted. Privilege sets can also restrict access to particular tables, records, or fields within a file. Each account is assigned a privilege set, which determines the level of access when someone opens a file using that account.Extended privileges determine the data sharing options that are permitted by a privilege set, such as whether a privilege set permits users to open a shared file or view a database in a web browser.
Opening a shared file (either a file shared by FileMaker Pro or hosted and shared by FileMaker Server). Enabling extended privileges only makes it allowable for certain privilege sets to access shared data. To actually access the shared data, you must also set up sharing for the type of access that you want. See Sharing databases on a network, Using ODBC and JDBC with FileMaker Pro, or Publishing databases on the web.