---
schema_version: "1"
id: fa5881a332e0a0441d825e64bb96c9d67082a36f8aa5b5d323b65317acb16b5b
title: Guest User Setup Checklist
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/networks_guest_checklist.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.networks_guest_checklist.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 81354ac6ae3617e09e7d437eceb7fbc0a325ffd5d2949e2c9f0bea093a290925
description: Setting up guest users in your Experience Cloud site requires a number of different settings and configurations. Use this high-level checklist to help you keep track of all the tasks and considerations.
products:
  - Security
  - Salesforce Platform
release: "264"
---
# Guest User Setup Checklist

Setting up guest users in your Experience Cloud site requires a number of different settings and configurations. Use this high-level checklist to help you keep track of all the tasks and considerations.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Salesforce Classic (<a href="https://help.salesforce.com/s/articleView?id=xcloud.overview_edition_lex_only.htm&amp;type=5&amp;language=en_US" target="_blank">not available in all orgs</a>) and Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, <strong>Unlimited</strong>, and <strong>Developer</strong> Editions</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Applies to: <a href="https://help.salesforce.com/s/articleView?id=experience.exp_cloud_basics_glossary.htm&amp;type=5&amp;language=en_US" target="_blank">LWR, Aura, and Visualforce sites</a></td></tr></tbody></table>

## Complete Your Initial Setup

![checkbox](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/access/images/networks_checkbox.png) [Configure guest user access for your Experience Cloud sites and pages.](https://help.salesforce.com/s/articleView?id=platform.community_builder_page_access_settings.htm&type=5&language=en_US)

![checkbox](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/access/images/networks_checkbox.png) [Review best practices for configuring the guest user profile.](https://help.salesforce.com/s/articleView?id=platform.networks_guest_profile_best_practices.htm&release=264.0.0&type=5 "When configuring the guest user profile, keep these recommendations and considerations in mind.")

![checkbox](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/access/images/networks_checkbox.png) [Configure the guest user profile.](https://help.salesforce.com/s/articleView?id=platform.rss_config_guest_user_profile.htm&release=264.0.0&type=5 "Before publishing your Experience Cloud site with public access enabled, configure the guest user profile so that your customers can view and interact with your site without logging in.")

![checkbox](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/access/images/networks_checkbox.png) [Create guest user sharing rules to grant record access.](https://help.salesforce.com/s/articleView?id=platform.security_sharing_rules_guest.htm&type=5&language=en_US)

![checkbox](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/access/images/networks_checkbox.png)[Review site user visibility best practices for guest users.](https://help.salesforce.com/s/articleView?id=platform.networks_user_visibility_best_practices.htm&release=264.0.0&type=5 "Site members and guest users must often see one another in a public setting. Guest user visibility is useful when you implement a public forum, like a self-service community, or build a public-facing app, like ideas. Keep these guest user visibility practices and considerations in mind when setting up your public-facing forum or site.") Then, [configure guest user visibility.](https://help.salesforce.com/s/articleView?id=platform.networks_user_sharing.htm&release=264.0.0&type=5 "With user sharing, you decide whether all users in an Experience Cloud site are visible to each other.")

![checkbox](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/access/images/networks_checkbox.png) [Assign records created by guest users to a default user.](https://help.salesforce.com/s/articleView?id=platform.networks_assign_guest_records.htm&release=264.0.0&type=5 "To increase the security of your Salesforce data, guest users are no longer automatically the owner of records they create. Instead, when a guest user creates a record, the record is assigned to a default active user in the org, who becomes the owner.")

![checkbox](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/access/images/networks_checkbox.png) [Optimize SEO for guest users.](https://help.salesforce.com/s/articleView?id=platform.networks_SEO_best_practices_guest_users.htm&release=264.0.0&type=5 "To configure your site for search engine optimization (SEO), Salesforce uses the guest user profile to identify the public pages and objects available for indexing. A search engine is considered a guest, or unauthenticated, user. For Experience Builder sites, Salesforce automatically generates a sitemap with a list of the publicly accessible content. For sites built with Salesforce Tabs +Visualforce, you’re responsible for creating the sitemap and indicating which pages are included.")

![checkbox](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/access/images/networks_checkbox.png) [Set up web-to-case for guest users.](https://help.salesforce.com/s/articleView?id=platform.rss_guest_users.htm&release=264.0.0&type=5 "When you set up Web-to-Case along with a case quick action, guest users can create a case without having to log in.")

![checkbox](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/access/images/networks_checkbox.png) [Test guest user access to your Experience Cloud site.](https://help.salesforce.com/s/articleView?id=platform.networks_guest_access_test.htm&release=264.0.0&type=5 "After you’ve implemented the recommended security settings, take your Experience Cloud site on a test drive to see what guest users see.")

## Manage an Existing Setup

![checkbox](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/access/images/networks_checkbox.png) [Review guest user object, record, and field access for sites.](https://help.salesforce.com/s/articleView?id=platform.networks_guest_user_access_verification.htm&release=264.0.0&type=5 "When you allow public access to your Experience Cloud sites, make sure that unauthenticated guest users are able to access only the data that you want them to access. Use the Guest User Sharing Rule Access Report page in Setup to quickly see what objects, records, and fields are accessible to your guest users using guest user sharing rules. Experience Cloud sites are used in many ways. While the Guest User Sharing Rule Access Report page evaluates your configuration and flags potentially misconfigured sharing rules, only you know your site’s business needs. Carefully decide which records and fields are accessible to your guest users.")

![checkbox](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/access/images/networks_checkbox.png) [Get a detailed report of guest user record visibility using an AppExchange package.](https://help.salesforce.com/s/articleView?id=platform.networks_accessible_by_guests.htm&release=264.0.0&type=5 "Use Authenticated and Guest User Access Report and Monitoring, available for free on AppExchange to see which objects and permissions users can access from your public sites. The report shows you the total number of records per object that users can access. The report also categorizes records owned by users, records shared with manual or Apex sharing, and queue or public group membership information.")

![checkbox](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/access/images/networks_checkbox.png) [Reassign records owned by guest users.](https://help.salesforce.com/s/articleView?id=platform.networks_reassign_historical_data_owned_by_guests.htm&release=264.0.0&type=5 "After the enforcement of the security policies introduced in Winter ’21, any record created by guest users is assigned to a default internal owner. However, guest users still own records they created before Winter ’21.")

![checkbox](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/access/images/networks_checkbox.png) [Remove guest users from queues and public groups.](https://help.salesforce.com/s/articleView?id=platform.networks_remove_guests_from_queues.htm&release=264.0.0&type=5 "Queues and public groups created before the Winter ’21 enforcement of guest user security policies can still have guest site users as members. Guest users being part of a queue or public group is a concern because any record shared with the public group is visible to the guest user, which can be anyone on the internet. Also, it’s possible that other members in the group aren’t aware of the guest user’s access to their records.")

![checkbox](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/access/images/networks_checkbox.png) [Remove records shared with guest users through manual sharing or Apex managed sharing.](https://help.salesforce.com/s/articleView?id=platform.networks_remove_apex_manual_sharing_guests.htm&release=264.0.0&type=5 "With the Guest User Access Report, you can find records that were shared with guest users manually or via Apex sharing before the Winter ’21 enforcement of the guest user security policy. You can then delete the records manually or by using DataLoader.")

## Respond to Incidents

If you think that guest users have access to records and data that they shouldn’t have, deactivate the site and guest users.

![checkbox](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/access/images/networks_checkbox.png)[Deactivate your site](https://help.salesforce.com/s/articleView?id=experience.networks_unpublish.htm&type=5&language=en_US).

![checkbox](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/access/images/networks_checkbox.png) Deactivate guest users by [deselecting **Guest users can see and interact with the site without logging in**.](https://help.salesforce.com/s/articleView?id=platform.community_builder_page_access_settings.htm&type=5&language=en_US)