---
schema_version: "1"
id: 5be866031c9127139465fa952b208cbca5770b9d449395fc9d49acb25b084c80
title: Public Access Settings for Salesforce Sites
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/sites_public_access_settings.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.sites_public_access_settings.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: f4ace011792dba0e02abf1b305f221655d70ad767a6e7681f6d66a0e45279a4b
description: Control what public users can do on each Salesforce Sites site.
products:
  - Salesforce Platform
  - Security
release: "264"
---
# Public Access Settings for Salesforce Sites

Control what public users can do on each Salesforce Sites site.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: both Salesforce Classic and Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Developer</strong>, <strong>Enterprise</strong>, <strong>Performance</strong>, and <strong>Unlimited</strong> Editions</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d115236e72">User
              Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d115236e72 ">To create and edit Salesforce Sites:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d115236e72 ">Customize Application</td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d115236e72 ">To edit public access settings for Salesforce Sites:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d115236e72 ">Manage Users</td>

          </tr>
        </tbody>
      </table>

To set the public access settings for your site:

1. From Setup, in the Quick Find box, enter Sites, and then select **Sites**.
2. Click the name of the site.
3. To open the Profile page for your site profile, click **Public Access Settings**.

From the profile page, you can view and edit profile permissions and settings. However, you can't clone or delete the profile.

From this page, you can:

- Set the object permissions for your site. You can grant Read and Create permissions on all standard objects except products, price books, and ideas. You can also grant Read, Create, Edit, and Delete on all custom objects. All permissions that aren't set by default must be set manually.
    
    ![Warning](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-extend_click-264-0-0-production-enus/5f7d9219-b7b1-4552-8891-f1aba9b289fc/images/icon_warning.png)
    
    Warning We recommend setting the default external access to Private for the objects on which you grant Read access for your site on the Sharing Settings Setup page. This approach ensures that users accessing your site can view and edit only the data related to your site.
    
    We also recommend securing the visibility of all list views. Set the visibility of your list views to Visible to certain groups of users, and specify the groups that you want to view this level of access.
    
    List views with visibility set to Visible to all users can be visible to public users of your site. To share a list view with public users, create a new public group for those users and give them visibility. If the object's sharing is set to private, public users can’t see those records, regardless of list view visibility.
- Control the visibility of custom apps. If you want to expose a custom app and its associated tabs to public users, make only that app visible and make it the default to avoid exposing other pages. If any of your site pages use standard Salesforce headers, public users can see other visible applications.
- Set the login hours during which users can access the site.
- Restrict the IP address ranges from which you can access the site.
    
    ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-extend_click-264-0-0-production-enus/5f7d9219-b7b1-4552-8891-f1aba9b289fc/images/icon_note.png)
    
    Note To set restrictions based on IP or login hours, HTTPS is required.
    
    All authenticated access requires HTTPS. Users logging into a site with a non-secure (HTTP) site URL are redirected to a secure (HTTPS) URL.
    
    The IP addresses in a range must be either IPv4 or IPv6. In ranges, IPv4 addresses exist in the IPv4-mapped IPv6 address space `::ffff:0:0` to `::ffff:ffff:ffff`, where `::ffff:0:0` is `0.0.0.0` and `::ffff:ffff:ffff` is `255.255.255.255.` A range can’t include IP addresses both inside and outside of the IPv4-mapped IPv6 address space. Ranges like `255.255.255.255` to `::1:0:0:0` or `::` to `::1:0:0:0` aren’t allowed.
- Enable Apex controllers and methods for your site. Controllers and methods that are already associated with your site's Visualforce pages are enabled by default.
- Enable Visualforce pages for your site. Changes made here are reflected on the Site Visualforce Pages related list on the Site Details page, and vice versa.