**Source URL:** https://limited.veevavault.dev/qualityone/mdl/component-types/atomicsecurity

# Atomicsecurity

**Class:** `metadata`

Atomic security provides an additional layer of control by allowing you to configure security at the lifecycle state and/or assigned role level.

Learn about [Atomic Security in Vault Help.](https://platform.veevavault.help/en/lr/30683#atomic_security)

| Attribute | Metadata | Description |
| --- | --- | --- |
| `label` | Type: String **Required** Max length: 60 | UI-friendly string in the Vault’s base language. |
| `active` | Type: Boolean | Indicates whether the component is active. |
| `object` | Type: Component **Required** | The `Object` the security applies to. For example, `Object.country__v` |
| `object_lifecycle` | Type: Component **Required** | The `Objectlifecycle` the security applies to. For example, `Objectlifecycle.general_lifecycle__c` |
| `state` | Type: Component **Required** | The Objectlifecyclestate of the `Objectlifecycle` the security applies to. For example, `Objectlifecyclestate.active_state__c` |

### Fieldsecurity

| Attribute | Metadata | Description |
| --- | --- | --- |
| `label` | Type: String **Required** Max length: 60 | UI-friendly string in the Vault’s base language. |
| `active` | Type: Boolean | Indicates whether the component is active. |
| `role` | Type: Component **Required** | The `Objectlifecyclerole` of the `Objectlifecycle` the security applies to. For example, `Objectlifecyclerole.editor__v` or `Objectlifecyclerole.DEFAULT` if specifying the default for all roles. |
| `type` | Type: Enum **Required** Allowed values: hide\_\_v; read\_\_v; edit\_\_v | The type of permission to apply. |
| `fields` | Type: Component **Required** Multi-value | The fields to apply this permission to. |

### Objectcontrolsecurity

| Attribute | Metadata | Description |
| --- | --- | --- |
| `label` | Type: String **Required** Max length: 60 | UI-friendly string in the Vault’s base language. |
| `active` | Type: Boolean | Indicates whether the component is active. |
| `role` | Type: Component **Required** | The `Objectlifecyclerole` of the `Objectlifecycle` the security applies to. For example, `Objectlifecyclerole.editor__v` or `Objectlifecyclerole.DEFAULT` if specifying the default for all roles. |
| `type` | Type: Enum **Required** Allowed values: hide\_\_v; view\_\_v | The type of permission to apply. |
| `object_controls` | Type: Component **Required** Multi-value | The object control permissions to apply. Learn more about [Object Control Permissions in Vault Help.](https://platform.veevavault.help/en/lr/22824#object-control-permissions) |

### Actionsecurity

| Attribute | Metadata | Description |
| --- | --- | --- |
| `label` | Type: String **Required** Max length: 60 | UI-friendly string in the Vault’s base language. |
| `active` | Type: Boolean | Indicates whether the component is active. |
| `role` | Type: Component **Required** | The `Objectlifecyclerole` of the `Objectlifecycle` the security applies to. For example, `Objectlifecyclerole.editor__v` or `Objectlifecyclerole.DEFAULT` if specifying the default for all roles. |
| `type` | Type: Enum **Required** Allowed values: hide\_\_v; view\_\_v; execute\_\_v | The type of permission to apply. |
| `object_actions` | Type: Component Multi-value | The Object level action(s) to apply this permission to. |
| `lifecycle_actions` | Type: Component Multi-value | The Lifecycle level action(s) to apply this permission to. |

### Workflowactionsecurity

| Attribute | Metadata | Description |
| --- | --- | --- |
| `label` | Type: String **Required** Max length: 60 | UI-friendly string in the Vault’s base language. |
| `active` | Type: Boolean | Indicates whether the component is active. |
| `role` | Type: Component **Required** | The `Objectlifecyclerole` of the `Objectlifecycle` the security applies to. For example, `Objectlifecyclerole.editor__v` or `Objectlifecyclerole.DEFAULT` if specifying the default for all roles. |
| `type` | Type: Enum **Required** Allowed values: hide\_\_v; execute\_\_v | The type of permission to apply. |
| `workflow_actions` | Type: Enum Multi-value Allowed values: addparticipants; cancel; emailparticipants; removecontent; updateworkflowduedate | The workflow action to apply. |
| `workflow_task_actions` | Type: Enum Multi-value Allowed values: cancel; reassign; updateduedate | The workflow task action to apply. |

### Relationshipsecurity

| Attribute | Metadata | Description |
| --- | --- | --- |
| `label` | Type: String **Required** Max length: 60 | UI-friendly string in the Vault’s base language. |
| `active` | Type: Boolean | Indicates whether the component is active. |
| `role` | Type: Component **Required** | The `Objectlifecyclerole` of the `Objectlifecycle` the security applies to. For example, `Objectlifecyclerole.editor__v` or `Objectlifecyclerole.DEFAULT` if specifying the default for all roles. |
| `type` | Type: Enum **Required** Allowed values: read\_\_v; edit\_\_v | The type of permission to apply. |
| `document_fields` | Type: Component Multi-value | Lists the object fields corresponding to the object-to-document inbound relationship on the specified object. |
| `object_fields` | Type: Component Multi-value | Lists the object fields corresponding to the object-to-object relationship on the specified object. |

### Supported Operations

| Operation | Support |
| --- | --- |
| Create | Yes |
| Recreate | Yes |
| Alter | Yes\* |
| Drop | Yes |
| Rename | Yes |
| Describe | Yes |
| Generate Recreate | Yes |
| Queryable | No |

**Notes:**

*   **Alter:** MDL Operation may not be supported for some multi-value attributes.

---

**Previous:** [Appsecurityrule](/qualityone/mdl/component-types/appsecurityrule)  
**Next:** [Checklisttype](/qualityone/mdl/component-types/checklisttype)