Review Guest User Access

Learn about guest user access.

• API Access Control
  This control removes the "API Enabled" system permission from unauthenticated guest user profiles.
• Record Access Control
  This setting enforces a mandatory private sharing model for unauthenticated users, so that they can only access records specifically shared with them through dedicated guest user sharing rules.
• Guest User Access: Organization-Wide Sharing Default External Access Control
  This control sets the most restrictive baseline for record visibility for all external users for org, so that no data is shared by default unless authorized through sharing rules.
• Guest User Access: Site Preferences for Guest User Control
  This security setting prevents unauthenticated visitors from accessing the full list of registered users, members, and contributors within an Experience Cloud site.
• Guest User Access: Site Preferences for Guest Accessing API Control
  This security preference serves as a master gate that determines whether unauthenticated visitors can interact with the underlying Salesforce Connect and public-facing REST endpoints of an Experience Cloud site.
• Guest User Access: Site User Visibility Control
  This security setting determines whether users within a specific Experience Cloud site can discover and view the profiles of other members belonging to that same site.