You are here:
Create a Sharing Set for Experience Cloud Site Users
Give Experience Cloud site users access to records using sharing sets. A sharing set grants site users access to any record associated with an account or contact that matches the user’s account or contact. You can grant access to records via access mapping, which defines access for each object in the sharing set. Access mappings support indirect lookups from the user and target record to the account or contact. For example, grant site users access to all cases related to an account that’s identified on the user’s contact records. A sharing set applies across all sites that a user is a member of. Record access granted to users via a sharing set isn’t extended to their superiors in the role hierarchy.
Required Editions
| Available in: Salesforce Classic and Lightning Experience |
| Available in: Enterprise, Performance, Unlimited, and Developer Editions |
| Applies to: LWR, Aura, and Visualforce sites |
| User Permissions Needed | |
|---|---|
| To create or update sharing sets: | Customize Application |
- From Setup, enter Digital Experiences in the Quick Find box, then select Digital Experiences | Settings.
- In the Sharing Sets related list, click New to create a sharing set, or click Edit to edit a sharing set.
- In the Sharing Set Edit page, fill in the Label and Sharing Set Name fields. Label is the sharing set label as it appears on the user interface. Sharing Set Name is the unique name used by the API.
- Enter a description.
-
Select the profiles of the users to whom you want to provide access.
Note You can have one sharing set per profile only. -
Select the objects you want to grant access to. You can use sharing sets with
these objects.
- Account (Account sharing sets can control access to Contract, Entitlement, and OrderItem objects.)
- AdvAccountForecastFact
- AdvAcctForecastSetPartner
- AntiCorruptionInitSum
- Assessment
- AssessmentQuestion
- AssessmentQuestionAssignment
- AssessmentQuestionResponse
- AssessmentQuestionSet
- Asset
- AuthApplicationAsset
- AuthApplicationPlace
- AuthLocationAccessSchedule
- Award
- BusinessLicense
- BusinessLicenseApplication
- BusinessMilestone
- BusRegAuthTypeDependency
- Campaign
- Case
- Claim
- ClaimCoverage
- ClaimRecoveryDocumentEnvelope
- CommissionSchedule
- ComplaintCase
- Contact
- CourseOffering
- CourtAction
- Custom Objects
- CustomerProperty
- DisclsReportingPeriod
- DivrsEquityInclSum
- DocumentTemplate
- DocumentTemplateClause
- EconomicPerformanceSum
- EmpBenefitSummary
- EmployeeDemographicSum
- EmployeeDevelopmentSum
- EnrolleeBenefit
- Examination
- FinancialDeal
- FinancialDealParty
- FinancialDealProduct
- FulfillmentOrder
- GeneratedDocument
- GoalDefinition
- GovtFinancialAsstSum
- Individual
- IndividualApplication
- InfoAuthorizationRequest
- InsurancePolicy
- Interaction
- InteractionSummary
- Knowledge (Sharing for Knowledge is available only when the Knowledge standard sharing org preference is enabled.)
- Lead (Contact Salesforce Customer Support to enable.)
- LoyaltyProgramPartner
- MfgProgramCpntFrcstFact
- MfgProgramForecastFact
- MfgProgramVariantFrcstFact
- MultipartyInfoAuthRequest
- OmniProcessAsmtQuestionVer
- Opportunity
- Order
- OrderSummary
- OrgIncidentSummary
- PartnerFundAllocation
- PartnerFundClaim
- PartnerFundRequest
- PartnerMarketingBudget
- PartyIncome
- PaymentRequest
- PersonEducation
- PersonExamination
- PersonLifeEvent
- Polygon
- PreliminaryApplicationRef
- ProcessException
- Producer
- ProducerCommission
- PublicComplaint
- PublicProgram
- RebateMemberProductAggregate
- RebateProgram
- RebateProgramMember
- RecordAlert
- RegulatoryCodeViolation
- RegulatoryTrxnFee
- RevenueTransactionErrorLog
- SalesAgreement
- SecuritiesHolding
- ServiceAppointment
- ServiceContract
- SocialContributionSum
- TaxDisclosureSummary
- TrainingCourseParticipant
- TrnCourse
- UnitOfMeasureConversion
- User
- WorkOrder
- WorkerCompCoverageClass
The Available Objects list excludes:- Objects with an org-wide sharing setting of Public Read/Write
- Custom objects that don't have an account or contact lookup field
Note Sharing sets for contacts, cases, and opportunities don’t automatically grant access to these objects’ parent accounts. To grant access, include the account in the sharing set as well. -
In the Configure Access section, click Set Up or
Edit next to an object name to configure access for
the selected profiles, or click Del to remove access
settings for an object.
Note Objects with Set Up in the Action column aren't configured for high-volume user access. Until you configure an object, high-volume users have limited or no access to its records.
-
Grant access based on an account or contact lookup.
- To determine the account or contact lookup on the user, select a value in the User dropdown list.
- To determine the account or contact lookup on the target object, select a value in the Target Object field.
For example, to grant access to all cases associated with an account identified on the user's contact record, select Contact.Account and then Account.
If you created a user from a contact to multiple accounts, you can grant access to all records with a lookup to any accounts related to that contact. Select Contact.RelatedAccount and Account respectively, and make sure that the relevant account-contact relationships are active.
Note Both selected fields must point to either an account or contact. For example, Contact.Account and Entitlement.Account both point to an account. - Choose an access level of Read Only or Read/Write. (If the object's organization-wide sharing setting is Public Read Only, then only Read/Write is available.)
- Click Update, then click Save.
After creating a sharing set, create share groups to give internal users access to records created by high-volume site users.
Learn more about site-specific sharing in this video.
- Use Share Groups to Share Records Owned by High-Volume Experience Cloud Site Users
Share groups allow you to share records owned by high-volume Experience Cloud site users with authenticated internal and external users.
