Released: July 16, 2026
A new View Masked SSN permission has been added to provide administrators with more granular control over how Social Security numbers are displayed throughout the platform. Organizations can now choose whether users are allowed to view the last four digits of a Social Security number or whether the value is fully masked.
To ensure a seamless transition, we automatically migrated existing administrator permissions so that current behavior remains unchanged after the update.
Administrators who previously could view the last four digits of an SSN will continue to have that access through the new View Masked SSN permission.
The existing View Full SSN permission remains unchanged and continues to allow authorized users to view and edit the full Social Security number on a contact profile.
If your institution wants to adopt a more restrictive security posture, administrators can remove the View Masked SSN permission from applicable roles. Once removed, users will no longer be able to view any portion of a Social Security number, including the last four digits, while the View Full SSN permission continues to govern access to the complete SSN.
New permission adds a dedicated View Masked SSN permission to control whether users can view the last four digits of a Social Security number.
Automatic migration preserves existing administrator access by assigning the new permission during upgrade, ensuring no change in current behavior.
Reduced permission scope allows administrators to remove the View Masked SSN permission from specific roles to fully mask Social Security numbers.
Existing permission unchanged keeps the View Full SSN permission functioning as before, allowing authorized users to view and edit the full Social Security number on a contact profile.
Improved data protection provides organizations with greater flexibility to align SSN visibility with their internal security and compliance requirements.
This update gives administrators more precise control over sensitive personal information without disrupting existing user access. Organizations can maintain their current experience by default or strengthen data privacy by fully masking Social Security numbers for selected users, while preserving the existing workflow for users who require full SSN access to perform their responsibilities.