You are here:
Set Up Access to Remote Action APIs
Configure access to Apex classes used by the remote actions (Vlocity Open Interface Apex classes) called from an Omniscript, Flexcard, Classic Card, or REST API, by profiles.
For example, after creating a Force.com site, users with the Site User profile can access some APIs based on the profile's Apex class access to RestResource Apex classes. Restricting Apex class access ensures that unauthorized users, such as a guest user, can't access classes through the Vlocity/V1/GenericInvoke/ API.

