Education Portal Security

Portal Security Basics

The first step in setting up your education portal is to create a security model that works for your institution.

You can tailor your portal security using a combination of org-wide default sharing settings, permission sets, and sharing sets.

Note Portals support only the external users who don't work for your institution, like applicants, students, and alumni. Make sure that your security model accounts for these users. See Securely Share Your Experience Cloud Sites with Guest Users.

Portal User Setup

Portal users must be users in your org and have an Education Cloud for Experience Cloud User license. Education Cloud for Experience Cloud User licenses require you to associate a role with an account.

If your portal supports more than 50,000 users at a time, consider optimizing account roles for external users. See Optimize Account Roles to Improve Performance and Scale.

If you enable role optimization, portal users that belong to accounts owned by the same Salesforce user share a role. This consideration makes role-based sharing risky because the portal users can access each other's records. If you plan to optimize account roles, we recommend that you don't use role-based sharing.

Also consider the limits on the number of roles and community-based users that you can have in your org. See Experience Cloud User Licenses.

Note Don't assign a community-based license to internal users.