---
schema_version: "1"
id: e133c821fe9a5b4d10e4181a9e028846eb0b5ad35133dca4c0197aaa2b511b49
title: External Organization-Wide Defaults Overview
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/security_owd_external.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.security_owd_external.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 0aa8faab265bf06dafbbdf74c42cea4d663a1972ff5ba3ead4b39c5a7868a948
description: External organization-wide defaults provide separate organization-wide defaults for internal and external authenticated users to help you better secure your data.
products:
  - Security
  - Salesforce Platform
release: "264"
---
# External Organization-Wide Defaults Overview

External organization-wide defaults provide separate organization-wide defaults for internal and external authenticated users to help you better secure your data.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: both Salesforce Classic and Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Professional</strong>, <strong>Enterprise</strong>, <strong>Performance</strong>, <strong>Unlimited</strong>, and <strong>Developer</strong> Editions</td></tr></tbody></table>

By setting configuring separate levels of default record access for your internal and external authenticated users, you have more control over data access. External-organization-wide defaults simplify your sharing rules configuration and improve recalculation performance. These settings also speed up performance for reports, list views, searches, and API queries.

For example, you want all your internal users to have read access to all account records, but you want to limit access for external authenticated users to certain groups and records. To configure more restrictive access for external authenticated users, set the default internal access to Public Read Only and the default external access to Private. You can later open up record access for external users using other features.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/images/icon_note.png)

Note The external access level for an object can’t be more permissive than the internal access level.

You can set external organization-wide defaults for these objects. Your org might have other objects whose external organization-wide defaults can be modified.

- Account
- Asset
- Case
- Campaign
- Contact
- Individual
- Lead
- Opportunity
- Order
- User
- Custom Objects

External organization-wide defaults aren’t available for some objects, but you can achieve the same behavior with sharing rules. Set the default access to Private and create a sharing rule to share records with all internal users.

External authenticated users include:

- Authenticated website users
- Chatter external users (with access only to the User object)
- Experience Cloud site users
- Customer Portal users
- Customer Community users
- High-volume Experience Cloud site users
- Partner users
- Service Cloud Portal users

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/images/icon_important.png)

Important Guest users aren't considered external users. Guest users’ org-wide defaults are set to Private for all objects, and this access level can’t be changed.

Learn more about external org-wide default settings in this video.

- **[Set Your External Organization-Wide Sharing Defaults](https://help.salesforce.com/s/articleView?id=platform.security_owd_external_setting.htm&release=264.0.0&type=5)**  
    External organization-wide defaults enable you to set a different default access level for external authenticated users.

#### See Also

- [Organization-Wide Sharing Defaults](https://help.salesforce.com/s/articleView?id=platform.security_sharing_owd_about.htm&release=264.0.0&type=5 "Define the default access that users have to records they don't own with organization-wide sharing settings. Organization-wide sharing settings can be set separately for custom objects and many standard objects. You can set different levels of access for internal and external users.")
- [Organization-Wide Default Access Settings](https://help.salesforce.com/s/articleView?id=platform.sharing_model_fields.htm&release=264.0.0&type=5 "For most objects, you can assign default access to Controlled by Parent, Private, Public Read Only, or Public Read/Write. Other access levels, like Public Full Access and View Only, are available for only specific objects.")
- [_Designing Record Access for Enterprise Scale_](https://developer.salesforce.com/docs/atlas.en-us.draes.meta/draes/draes_preface.htm)