Consider the limitations of unlisted groups before you decide to enable them in your organization.
|Available in: both Salesforce Classic and Lightning Experience|
|Available in: Group, Enterprise, Professional, Performance, Unlimited, Contact Manager, and Developer Editions|
- Only users with the “Manage Unlisted Groups” permission can access or modify unlisted groups and its files and feed content without membership.
- Users with the “Modify All Data” permission can’t delete feed content from unlisted groups, unless they are group members.
- Users with the “Data Export” permission can export all Chatter data and view the exported posts and comments from any group, regardless of whether they have the “Manage Unlisted Groups” permission.
- You can’t grant the “Manage Unlisted Groups” permission to users with these profiles Chatter External, High Volume Portal, or High Volume Customer Portal.
- Unlisted groups count toward a user’s group limit, but they don’t appear in the Groups list on a user’s profile page unless the person who’s viewing the list is a member of those groups or has permission to manage unlisted groups. When unlisted groups are hidden, the count that’s shown next to the Groups list might not be accurate, depending on the permissions of the person viewing the list.
Apex code runs in system mode, which means that the permissions of the current user aren’t taken into account. This limitation has implications for pages that are written in Apex.
- Visualforce pages that display groups might expose unlisted groups to users who aren’t members.
- Because system mode disregards the user’s permissions, all users who are accessing a Visualforce page that’s showing an unlisted group can act as an owner of that group.
- AppExchange apps that are written in Apex and that access all groups will expose unlisted groups to users who aren’t members.
To limit and manage access to the unlisted groups in your organization:
- Explicitly filter out unlisted groups from SOQL queries in all Apex code.
- Use permission sets, profile-level permissions, and sharing checks in your code to further limit unlisted group access.
- Use Apex triggers on the CollaborationGroup object to monitor and manage the creation of unlisted groups. In Setup, enter Group Triggers in the Quick Find box, then select Group Triggers to add triggers.