Managing security > Creating and editing privilege sets > Editing extended privileges for a privilege set

Editing extended privileges for a privilege set

Privilege sets can limit extended privileges, which determine whether and how a shared file is accessible.

To edit extended privileges for a privilege set:

1. Start editing a new or existing privilege set the Edit Privilege Set dialog box.

See Creating and editing privilege sets.

Note  If the File menu > Manage > Security menu is dimmed, your privileges do not permit you to access it. See the note below for another possible way to edit extended privileges.

2. In the Extended Privileges list, select the extended privileges you want to enable, and clear the ones you want to disable.

The following table lists the default extended privileges that are available.



Extended privilege

Determines if a privilege permits


Access via FileMaker WebDirect

Accessing a database file from a web browser via FileMaker WebDirect (FileMaker Server and FileMaker Cloud products only).


Access via ODBC/JDBC

Accessing a database file as an ODBC or JDBC data source.


Access via FileMaker Network, server-side scripting, or FileMaker Go

Opening a shared file (either a file hosted by FileMaker Pro Advanced, FileMaker Server, or a FileMaker Cloud product).


Require re-authentication after the specified minutes in sleep/background

Accessing a file in FileMaker Pro Advanced or FileMaker Go without having to re-login after file hibernation or after using a different app. The default time is 10 minutes.


Access via XML Web Publishing

Accessing a database file from a web browser or other application via XML web publishing (FileMaker Server only).


Access via PHP Web Publishing

Accessing a database file from a web browser or other application via PHP web publishing (FileMaker Server only).


Access via FileMaker Data API

Accessing a database file from a web service via the FileMaker Data API (FileMaker Server and FileMaker Cloud products only). See FileMaker Data API Guide.


Allow Apple events and ActiveX to perform FileMaker operations

Accessing a database file from another application.


Allow URLs to perform FileMaker scripts

Performing a script from a URL.


Access via OData

Accessing a database file from an OData-capable client application (FileMaker Cloud only). See FileMaker Cloud OData Guide.


Do not create extended privileges that begin with "fm"; keywords with this prefix are reserved by FileMaker.

Enabling extended privileges only makes it allowable for certain privilege sets to access shared data. To actually access the shared data, you must also set up sharing for the type of access that you want. See Sharing files on a network, Sharing FileMaker Pro Advanced data via ODBC or JDBC, or Publishing databases on the web.

While configuring sharing settings for FileMaker Network sharing, ODBC/JDBC, or FileMaker WebDirect, you can enable sharing for all users or certain privilege sets if your privilege set permits it. This method is accessible by any account access assigned a privilege set with the Manage extended privileges privilege enabled, so it can be accessed by account access that is not assigned the Full Access privilege set. See Editing other privileges, Sharing files on a network, Using ODBC and JDBC with FileMaker Pro Advanced, or Publishing databases with FileMaker WebDirect.

If a file has been set to save the password in your Credential Manager (Windows) or keychain (macOS and iOS), and the fmreauthenticate extended privilege has been enabled, you will not be prompted for account information unless the password is invalid or the current account name does not match the account name stored in your Credential Manager or keychain.

Related topics 

About accounts, privilege sets, and extended privileges

Creating and editing extended privileges

Scripting with ActiveX Automation (Windows)

Scripting with Apple events (macOS)

Opening files using a URL