In production orgs created before February 8, 2024 that enabled digital experiences
before the “Enable Secure Roles Behavior and Update Sharing Group References in Production”
release update was enforced Winter ’26, records that were previously accessible to Roles and
Subordinates became available to Roles, Internal and Portal Subordinates. You can use the
Convert External User Access wizard to not share records or folders with external
users.
Required Editions
| Available in: Salesforce Classic and Lightning Experience |
| Available in: Enterprise, Performance, Unlimited, and
Developer Editions
|
| Applies to: LWR, Aura, and Visualforce sites |
| User Permissions
Needed |
| To use the Convert External User Access Wizard: |
Customize Application |
-
From Setup, in the Quick Find box, enter Digital Experiences,
and then select .
-
Click the Convert Site Member Access link.
-
Select the checkboxes next to the sharing rules that you want to convert to Roles and
Internal Subordinates. If there are no sharing rules to convert but you want to convert
the access level for folders, proceed to the following step.
-
Click Next.
-
Select the checkboxes next to the folders whose access levels you want to change to
Roles and Internal Subordinates.
The wizard doesn't convert folders that are accessible to all users or accessible to
public groups. You must manually update the access levels on those folders.
A particular folder can display on multiple rows in the wizard, for example a row for
each Role, Internal and Portal Subordinates category to which a folder is shared.
-
Click Next, then click Save to apply your changes.
The Convert External User Access Wizard doesn’t convert access for these features or
sharing mechanisms:
- Manual sharing
- Apex managed sharing
- Public groups
- Queues
- List views
For information on manually updating access to the Roles and Internal Subordinates
category, see Considerations for the Convert External User Access
Wizard.
