This article covers the scenario where enabling the OmniStudio feature flag causes OmniStudio-driven components (FlexCards, OmniScripts, Integration Procedures) inside an Experience Cloud site to fail for community/portal users while the same components work for internal admins.
"Error in the intermediary community that prevents the product quote process due to the activation of the OmniStudio flag"
In browser developer tools, a server action to /s/sfsites/aura returns: "error": { "message": "This feature is not currently enabled for this user.", "statusCode": 403, "errorCode": "INSUFFICIENT_ACCESS" }
The OmniStudio feature is activated in Setup, but the affected community profile or permission set lacks the OmniStudio permission set assignment, Apex class access, or object/field-level access required by the OmniStudio runtime.
Affected users are external Experience Cloud users (for example, a portal login used for a course-registration or product-quote process); internal profiles with the OmniStudio permission set are unaffected.
Follow these steps to restore OmniStudio component access for Experience Cloud users after enabling the OmniStudio feature.
Go to Setup > Users > Permission Sets.
Open the OmniStudio permission set that grants runtime access.
For OmniStudio-managed metadata, this is OmniStudioRuntime.
For package-based orgs, this is the vlocity_namespace runtime permission set.
Click Manage Assignments > Add Assignment.
Select every external/community user (for example, the portal or course-registration login) that runs the failing FlexCard or OmniScript, then click Assign.
Go to Setup > Users > Profiles and open the community profile assigned to the affected users.
Click Enabled Apex Class Access > Edit.
Add the controllers used by the runtime: OmniStudioBaseController, and for course-registration, the CourseRegistrationConnect controller.
Move them to Enabled Apex Classes and click Save.
Go to Setup > Object Manager and open each object the OmniScript/Integration Procedure reads or writes (for example, Product2, Quote, QuoteLineItem, or your course-offering object).
On the community profile, set Object Permissions to Read for objects the process only reads, and Read plus Edit or Create for objects the process writes.
Under Field-Level Security, set every field referenced by the OmniScript, FlexCard, or formula to Visible. Note: A hidden required field will produce the 403 INSUFFICIENT_ACCESS response.
Go to Setup > Feature Settings > OmniStudio > OmniStudio Settings and confirm Enable OmniStudio Metadata is checked.
Open the OmniScript or FlexCard in the OmniStudio designer, click Activate (and Compile for LWC if the component is LWC-based).
Publish the Experience Cloud site again from Experience Builder > Publish.
Confirm the issue is resolved by logging in as the affected community user and opening the Experience Cloud page that runs the FlexCard or OmniScript. Verify the component loads and completes successfully with no "This feature is not currently enabled for this user" toast and no 403 errors in the browser network tab.
005389030

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.