Considerations for Configuring Guest User Access to Discovery Framework Omniscripts

General Considerations

You can add only active Omniscripts to Experience Cloud sites.

System Permissions

• Review all system permissions, and then deselect the permissions that aren’t necessary for your use case.
• When configuring the guest user profile, make sure to select the Enables consumers and partners to execute Omniscripts, DRs, Cards through a Community or off platform user permission checkbox.
• When submitting responses, users should have the necessary permissions to create both Assessment and Assessment Question Responses.

Visualforce Page and Apex

• Review all Visualforce and Apex pages that guest users can access.
• Remove pages that you don’t want guest users to access. Ensure guest users have access to theomnistudio.OmniScriptInstancePage and omnistudio.ContractVersionDocumentPdf (if you’re using Document Generation capabilities) Visualforce pages.
• Ensure guest users have access to omnistudio.BusinessProcessDisplayController, omnistudio.FlexRuntime, and omnistudio.NewportUtilities Apex pages.

Security and Privacy

Sharing data with Experience Cloud site guest users should be a careful and considerate process. Salesforce defaults are the most restrictive they can be for guest users, and it’s up to you to decide to share data with guests or not. To secure your site for guest users, consider all the use cases and implications and implement security controls that you think are appropriate for the sensitivity of your data. See Give Secure Access to Unauthenticated Users with the Guest User Profile.