---
schema_version: "1"
id: 6ff45ce4be76424e1e5f375431f4d1027608801eb040f172eacec8a2d2689811
title: Scope and Visibility of @RemoteAction Methods
collection: developer
version: current
locale: en-us
portal_url: https://docs.salesforce.com/developer/current/en-us/platform/salesforce-pages-developers-guide/guides/pages/javascript/pages-js-remoting-scope-visibility.md
canonical_url: https://developer.salesforce.com/docs/platform/salesforce-pages-developers-guide/guide/pages-js-remoting-scope-visibility.html
source_site: developer.salesforce.com
content_type: documentation
content_hash: cb989aabe3730dd0625cf0b4d3ad24e2142423ca5c583d04efa7710d28bbb0bf
products:
  - Visualforce Developer Guide
  - Platform Developer Content
---

# Scope and Visibility of @RemoteAction Methods

Apex `@RemoteAction` methods must be `static` and either `global` or `public`.

Don’t use globally exposed remote actions to perform sensitive operations or to expose nonpublic data. `Global` remote actions can only call other `global` methods. You can’t use public remote actions in `global` components, or in a `global` scope. Scope escalation results in a compiler error, or for references that are resolved at runtime, a runtime failure. This table describes the restrictions.

| `@RemoteAction` Scope | Visualforce Page | Non-Global Component | Global Component | iframe  | Access Across Packages                                                                     |
| --------------------- | ---------------- | -------------------- | ---------------- | ------- | ------------------------------------------------------------------------------------------ |
| Global Remote Method  | Allowed          | Allowed              | Allowed          | Allowed | Allowed                                                                                    |
| Public Remote Method  | Allowed          | Allowed              | Error            | Error   | Packages must share the namespace. Method must have the `@namespaceAccessible` annotation. |

**note:** If a @RemoteAction method is in a managed package and used by Visualforce Remoting, it must have global visibility if user profile or permission set access is used.

When remote actions are accessed via markup they are included indirectly via components, the `<apex:include>,` or the `<apex:composition>` tags. The scope of the remote method is carried forward into the top-level container (the top-level item in the inclusion hierarchy), which must abide by scope escalation rules.

| @RemoteAction Accessed From           | Visualforce Page                                                                                                                                  | Non-Global Component | Global Component                                                            | iframe                                                                      |
| ------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------- | --------------------------------------------------------------------------- | --------------------------------------------------------------------------- |
| Global Component                      | Allowed                                                                                                                                           | Allowed              | Allowed                                                                     | Allowed                                                                     |
| Non-Global Component                  | Allowed                                                                                                                                           | Allowed              | Allowed only if non-global component doesn't include public remote methods. | Allowed only if non-global component doesn't include public remote methods. |
| `<apex:include>` `<apex:composition>` | Allowed within the same namespace; error if namespaces are different and the included page or its child hierarchy contains public remote methods. | n/a                  | n/a                                                                         | Error                                                                       |