Loading

Require Granular Flow Permissions for Experience Cloud Guest Users Rollout Update

Дата публикации: Sep 27, 2025
Описание

In Winter ’22, Salesforce discontinued the Run Flows permission for the Guest User and Experience Cloud External User profiles in new orgs. In Spring ’23, Salesforce removed Run Flows from the Guest User profile in all orgs. 

It was possible to give this permission through profiles and permission sets until the update completed in the Spring of 2023.  Since it is not possible to assign permission sets to guest users, it is not possible to give this permission through permission sets either. To allow guest users access your flows, you need to grant individual access to each flow that you want them to access.

Bid Farewell to Run Flows for Guest Users

Решение

How do I know if “Require Granular Flow Permissions for Experience Cloud Guest Users” is enforced or not?

Go to Guest User Profile → Run Flows.

If you don’t see “Run Flows” permission on the guest user profile, the release update is enforced. 

When the release update is enforced to your sandbox or production org, new permissions need to be created for required users and allow access for every flow you want accessible to the guest user.

Allow Guest Users to Access Flows

  1. Locate the flow to update and, from the actions dropdown next to the flow, select Edit Access.
  2. Select Override Default Behavior and restrict access to enabled profiles or permission sets.
  3. Save your flow.
  4. Navigate to Experience Builder and go to Settings.
  5. On the General tab, select the Guest User profile.
  6. Under Enabled Flow Access, click Edit.
  7. Choose flows from the Available Flows column and add them to the Enabled Flows column.
  8. Save your work.

For more information see Allow Guest Users to Access Flows.

Note: When the admin user cannot see the option "Edit Access" on the Flow Setup page in the Lightning UI for an Autolaunched Flow, the workaround is to use the Classic UI and look for the "Security" link for the flow as instructed below and in the published Known Issue.

Autolaunched Flows

  1. Switch to Classic mode.
  2. Open Flows.
  3. At the affected flow you should see the “Security” hyperlink.
  4. After selecting the Security hyperlink, you should see the option to "Override default behavior and restrict access to enabled profiles or permission sets."
  5. Navigate to the Guest User profile.
  6. Choose flows from the Available Profiles column and add them to the Enabled Profiles column.
  7. Save your work.

 

Managed Package Flows

Note: All flows with Managed packaged flows will have an impact where you will not be able to make any changes or update the permissions for guest users to access flows. To make any changes please follow the workaround and work with the package provider as instructed below.

  • Contact the package provider and ask them to make changes to the flows package metadata to set the isAdditionalPermissionRequiredToRun field to TRUE. Once the package has been updated then you will be able to add or provide the granular permissions to guest users.
  • Another option, if the package provider(Partner) can expose the content and share the flow template, the subscriber org users can copy and edit the flow in their org.

Known Issue - Unable to edit flows to provide Granular Permissions for Guest Users for Managed Package flows

Номер статьи базы знаний

000394651

 
Загрузка
Salesforce Help | Article