Grant Unauthenticated Guest Users Access to Records Owned by High-Volume Users

Choose whether to include records owned by high-volume community or site users when you create guest user sharing rules. By default, guest user sharing rules include only records that match the rule’s criteria and are owned by authenticated users, guest users, and queues. Because of security improvements in Experience Cloud sites, this setting is the only way to grant guest users access to records owned by high-volume users.

Where: This change applies to all Aura, LWR, and Visualforce sites accessed through Lightning Experience and Salesforce Classic in Enterprise, Performance, Unlimited, and Developer editions.

Who: This option is available only if you have high-volume users. High-volume users include the External Apps, Customer Community, High Volume Customer Portal, and Authenticated Website license types.

How: From Setup, in the Quick Find box, enter Sharing Settings, and then select Sharing Settings. In the Sharing Rules related list for the object, click New and select the Guest user access, based on criteria rule type. After you specify the criteria, to share records owned by high-volume users, select Include records owned by high-volume users.

This option is available only for guest user sharing rules, not for owner-based or criteria-based sharing rules. You can’t edit this checkbox after the sharing rule is created.