The field to refer to an external system should not be shown if the user does not have those permissions