Reassign Records Owned by Guest Users

After the enforcement of the security policies introduced in Winter ’21, any record created by guest users is assigned to a default internal owner. However, guest users still own records they created before Winter ’21.

A site guest user in an org is one user record, and all guest users are assigned to that user record. Essentially, anyone on the internet is considered a guest user when it comes to accessing a Salesforce site. That means that anyone on the internet is also an owner of any records in the org that the site guest user owns.

To fix the ownership, query the records with tools like listviews or Data Loader. For each public site, filter on the record owner field (ID or name) equaling the guest site user. You can find the guest site user name by looking at the Assigned Users in each guest user profile. You can also use listviews or reports to filter object records by the owner field.

When you have the guest user’s records, reassign ownership of the records to an authenticated user. You can do this manually in the UI on a record-by-record basis. But if you have a large quantity of records, use Dataloader to mass-update the records.

This SOQL query finds account records owned by the guest user. Replace Account with the object you’re querying.

SELECT Id, OwnerId FROM Account WHERE OwnerId = '[GuestUserRecordId]'