Use the Convert External User Access Wizard

In production orgs created before February 8, 2024 that enabled digital experiences before the “Enable Secure Roles Behavior and Update Sharing Group References in Production” release update was enforced Winter ’26, records that were previously accessible to Roles and Subordinates became available to Roles, Internal and Portal Subordinates. You can use the Convert External User Access wizard to not share records or folders with external users.

Required Editions

Available in: Salesforce Classic and Lightning Experience

Available in: Enterprise, Performance, Unlimited, and Developer Editions

Applies to: LWR, Aura, and Visualforce sites

User Permissions Needed
To use the Convert External User Access Wizard:	Customize Application

Note In all orgs created on February 8, 2024 or later and in all orgs that enabled digital experiences after Winter ’26, records shared with the Roles and Internal Subordinates group through sharing rules or other mechanisms remain accessible only to internal users. You aren’t required to use the Convert External User Access Wizard to secure access.

1. From Setup, in the Quick Find box, enter Digital Experiences, and then select Digital Experiences | Settings.
2. Click the Convert Site Member Access link.
3. Select the checkboxes next to the sharing rules that you want to convert to Roles and Internal Subordinates. If there are no sharing rules to convert but you want to convert the access level for folders, proceed to the following step.
4. Click Next.
5. Select the checkboxes next to the folders whose access levels you want to change to Roles and Internal Subordinates.

   The wizard doesn't convert folders that are accessible to all users or accessible to public groups. You must manually update the access levels on those folders.

   A particular folder can display on multiple rows in the wizard, for example a row for each Role, Internal and Portal Subordinates category to which a folder is shared.

6. Click Next, then click Save to apply your changes.

The Convert External User Access Wizard doesn’t convert access for these features or sharing mechanisms:

• Manual sharing
• Apex managed sharing
• Public groups
• Queues
• List views

For information on manually updating access to the Roles and Internal Subordinates category, see Considerations for the Convert External User Access Wizard.

See Also

• Configure Digital Experiences Settings