Non-administrator users encounter a permission error when attempting to upload images from their local drive to Rich Text Editor components in Experience Cloud sites. The error message "You do not have permission to execute this operation" prevents the image upload from completing, while uploads from the Asset Library work correctly.
Error message appears: "You do not have permission to execute this operation" when uploading images from local drive
The same user can successfully add images from the Asset Library without errors
Administrator users can upload images from local drive without issues
The error occurs consistently across all templates and pages within the Experience Cloud site
When a file is uploaded to an Experience Cloud site's Rich Text Editor component, the platform automatically converts it to an Asset file to ensure accessibility by all external site users. This process, called "assetization," moves the file to the Asset Library and creates a sharing record with the site's network ID, indicating that the file can be accessed by site users.
These file shares are stored in the ContentDocumentLink entity, and during the creation of these shares, the platform validates whether the uploading user has the necessary permissions to share files with Experience Cloud site users. The validation process specifically checks for the "Share Files with People in Experience Cloud sites" permission and blocks the upload if this permission is not granted to the user.
The permission validation occurs in the platform's content sharing boundary validation logic, which determines that users without this specific permission lack the necessary access level to perform the file sharing operation required for Experience Cloud site uploads.
Navigate to Setup in your Salesforce organization
Go to Users → Profiles or Permission Sets (depending on your permission model)
Locate the profile or permission set assigned to the affected user
Search for the permission "Share Files with People in Experience Cloud sites"
Enable this permission for the user's profile or assign a permission set containing this permission
Save the changes to the profile or permission set
Ask the user to log out and log back in to refresh their session permissions
Test the image upload functionality by having the user attempt to upload an image from their local drive to a Rich Text Editor component
Verify that the upload completes successfully and the image appears in both the Rich Text Editor and the site's Asset Library
Note: This permission is specifically required for uploading files that will be shared with external Experience Cloud site users. Users without this permission can still upload files to internal Salesforce records but cannot upload files that need to be accessible by site users.
005227038

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.