---
schema_version: "1"
id: 36a131b74735fa705f8ada7a58de9be85a3135b73b9d736fef8263c4c2533190
title: Secure Guest Users’ Sharing Settings and Record Access
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/networks_secure_guest_user_sharing.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.networks_secure_guest_user_sharing.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 0eeb2ef58dfbf9580384a86de0bb3664b4f57bed3a56493c9241fb7784890ce2
description: Secure the access that unauthenticated guest users have to your org’s data.
products:
  - Security
  - Salesforce Platform
release: "264"
---
# Secure Guest Users’ Sharing Settings and Record Access

Secure the access that unauthenticated guest users have to your org’s data.

### Required Editions

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/images/icon_important.png)

Important Where possible, we changed noninclusive terms to align with our company value of Equality. We maintained certain terms to avoid any effect on customer implementations.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Salesforce Classic and Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Essentials</strong>, <strong>Enterprise</strong>, <strong>Performance</strong>, <strong>Unlimited</strong>, and <strong>Developer</strong> editions</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d42016e78">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d42016e78 ">To edit guest user sharing settings:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d42016e78 ">Manage Sharing</td>

          </tr>
        </tbody>
      </table>

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/images/icon_important.png)

Important The Secure guest user record access setting is enabled in all Salesforce orgs with Experience Cloud sites and can't be disabled. The timelines for the rollout and enforcement of this setting are published in [Guest User Security Policies and Timelines](https://help.salesforce.com/articleView?id=networks_guest_policies_timelines.htm&language=en_US).

1. From Setup, enter Sharing Settings in the Quick Find box.
2. Select **Sharing Settings**.
3. Select **Secure guest user record access**.
    
    When this setting is enabled, guest users:
    
    - Have org-wide defaults set to Private for all objects, including objects not listed on the Sharing Settings page. This access level can’t be changed. Child objects with a master-detail relationship that rely on a parent's sharing settings have an org-wide default of Controlled by Parent. The parent object's Private org-wide default is inherited by the child object, making it Private too.
    - Can’t be added to queues or public groups.
        - Guest users that were added to queues or public groups before this setting was enabled aren’t removed automatically. You must remove these guest users manually.
    - Can’t be given access to records through manual sharing or Apex managed sharing.
    - Can be granted Read Only access to records only through guest user sharing rules. Guest user sharing rules are a special type of criteria-based sharing rule and count toward the limit of 50 criteria-based sharing rules per object.
        
        ![Warning](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/images/icon_warning.png)
        
        Warning The guest user sharing rule type grants access to guest users without login credentials. By creating a guest user sharing rule, you're allowing immediate and unlimited access to all records matching the sharing rule's criteria to anyone. To secure your Salesforce data and give your guest users access to what they need, consider all the use cases and implications of creating this type of sharing rule. Implement security controls that you think are appropriate for the sensitivity of your data. Salesforce is not responsible for any exposure of your data to unauthenticated users based on this change from default settings.

#### See Also

- [Create Guest User Sharing Rules](https://help.salesforce.com/s/articleView?id=platform.security_sharing_rules_guest.htm&release=264.0.0&type=5 "A guest user sharing rule is a special type of criteria-based sharing rule and the only way to grant record access to unauthenticated guest users. Guest user sharing rules can only grant Read Only access.")