Platform User License (PUL) users and UEL users have different sharing behavior.
Without the right controls, PUL users might edit cases they do not own or view internal case
comments. Review the settings below to prevent unintended access. While validation is optional,
we recommend completing these steps to ensure all features function as expected after the
migration.
Confirm that the required baseline settings are enabled for both UEL and PUL license types.
Set External Org-Wide Defaults (OWD) to Private for both license types.
For PUL users, set Internal OWD to Private.
Confirm the following are enabled (True) for both license types:
Person Accounts
Network features (Enabled, Member, and Internal User)
Employee Linkage
Verify Security Settings
Configure PUL users as requestor-only users and prevent unintended access.
Set internal Org-Wide Defaults (OWD) to Private.
Enable the NetworkOnlyInternalUser profile permission for PUL users who should have requestor-only access.
Use custom public groups to separate requestor-only PUL users from standard internal users.
Configure sharing rules so requestors get access to the correct records, independent of internal user groups.
Use Apex to ensure Chatter feeds and Case comments created by PUL users are marked public/external only.
Verify Employee Record Permissions
Protect employee data by limiting visibility and edit access.
Remove the View Employee user button unless all users should be able to access Employee
information.
Restrict edit access on Employee records to admins only. Otherwise, users can change their own Employee Status, Start Date, and Employee Number.
Did this article solve your issue?
Let us know so we can improve!
Loading
Salesforce Help | Article
Cookie Consent Manager
Cookie Consent Manager
General Information
Required Cookies
Functional Cookies
Advertising Cookies
General Information
We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required Cookies
Always Active
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional Cookies
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising Cookies
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.