---
schema_version: "1"
id: c5d2e94cc3d80213898bf1a88f8cc791a8369500876805be38a3f05a248bb9f0
title: Add Apex Class Permissions Checkers
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/os_standard_add_an_apex_class_permissions_checker.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.os_standard_add_an_apex_class_permissions_checker.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 77d6a5aa99238967c568b7f8385af1ef3fe653b1581f6e310442d4ec1611a514
description: Enable specific access to the classes used by remote action APIs for each user profile, permission set, or permission set group. Configure Apex class permissions checkers to ensure that users require explicit access to the Apex class that administers the remote action called from an Omniscript, Flexcard, Integration Procedure, or REST API.
products:
  - Omnistudio
release: "264"
---
# Add Apex Class Permissions Checkers

Enable specific access to the classes used by remote action APIs for each user profile, permission set, or permission set group. Configure Apex class permissions checkers to ensure that users require explicit access to the Apex class that administers the remote action called from an Omniscript, Flexcard, Integration Procedure, or REST API.

For example, after you create a Lightning Platform site, publicly available APIs are enabled for the Site User profile based on the profile's Apex class access to some Apex classes. When you add an Apex class permissions checker, you ensure that unauthorized users, such as a guest user, can't access classes through the ApexRemote call implementing the Callable interface.

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-omnistudio-264-0-0-production-enus/f526eaa8-ae05-487a-8944-4bb99b0b78ac/images/icon_important.png)

Important Enable the `ApexClassCheck` setting to ensure the principle of least privilege and that unintentional unauthorized access isn’t provided to guest users.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-omnistudio-264-0-0-production-enus/f526eaa8-ae05-487a-8944-4bb99b0b78ac/images/icon_note.png)

Note Users who use Remote Actions in Integration Procedures must have access to the object and record they're invoking through the action. If they receive an access error, they must be granted object and record access at the profile, permission set, or permission set group level.

Enable the `ApexClassCheck` setting.

1. From Setup, in the Quick Find box, enter Omni Interaction Configuration, then select **Omni Interaction Configuration**.
2. Click **New**.
3. For Name and Label, enter ApexClassCheck.
4. For Value, enter true.
5. Save your changes.

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-omnistudio-264-0-0-production-enus/f526eaa8-ae05-487a-8944-4bb99b0b78ac/images/icon_important.png)

Important During the week of February 2, 2026, Salesforce enables the ApexClassCheck setting by default to enhance org security. Review and prepare your configuration for a seamless transition and to prevent potential service interruptions. See [Security Checks for Omnistudio](https://help.salesforce.com/s/articleView?id=xcloud.os_omnistudio_security_updates_overview.htm&release=264.0.0&type=5 "The security checks for Omnistudio enforce stricter validation of access and permissions. These checks make sure that users, including guest, authenticated, and non-authenticated users, have the appropriate access to objects and fields used within Omnistudio components.").