Review Guest User Object Access Levels for Sites

As Experience Cloud sites are used in many ways and often contain different levels of sensitive data, it is critical that customers review their guest user permissions. An unauthenticated guest user is anyone who visits your Experience Cloud site or Community, or Salesforce Site, from the public internet without the requirement to log in. 

We created the Guest User Sharing Rule Access Report page in Setup to help customers evaluate their access permissions. While this capability provides a list of  all access given to guest users, it cannot determine the intent behind your current access permissions.  While your Experience Cloud site may just show small sets of fields and objects in its User Interface (UI), the guest user may have access to more data than intended. We strongly recommend that you restrict guest user access to only share objects, fields, and records on a need-to-know basis, regardless of whether they are featured in the UI of your site. 

REQUIRED EDITIONS AND USER PERMISSIONS

We recommend that you review all rows carefully and validate the intent of sharing this object with guest users. From Setup, in the Quick Find box, enter Guest User Access, then select Guest User Sharing Rule Access Report.

1. Select a site from the dropdown, and review the report. Validate that the guest user needs access to these objects, fields and records. Repeat this step for each site in your org.
2. If any fields are at risk of being overly accessible, update object-level access by accessing the guest user record, or updating access levels in the profile, permission set, or permission set group. You can access the guest user record with the link from the Guest User Sharing Rule Access Report page, or through Digital Experiences > [Your Site’s Name] Builder > Settings > General > [Your Site’s Name] Profile.
3. If access to records has been granted through a guest sharing rule, review the criteria of the rule.
4. As always, we strongly recommend that you test any changes in a sandbox environment before making the changes in a production site.