Security and Sharing

Hide more personal information fields with a new user setting, retain guest users’ access to products, and give more granular access to flows.

  • Hide More Personal Information Fields
    Prevent external users, such as portal or partner users, from viewing personal information in your user records. Now when you apply the Enhanced Personal Information Management setting, Salesforce blocks view access to 20 fields that are considered personal information. This setting is also more flexible than the Hide Personal Information setting. To implement this setting, in User Management Settings, add or remove the PersonalInfo compliance category for any field.
  • Create Sharing Rules to Retain and Control Guest Users’ Product Access (Release Update)
    To better protect your Salesforce data, this update changes how unauthenticated guest access to product records is controlled. To prevent guest users from losing access to products, create and test guest user sharing rules. The Product org-wide sharing default for external users is no longer applied to guest users, and guest user access is set to Private. This setting can’t be changed. This update was first made available in Winter ’22.
  • Bid Farewell to Run Flows for Guest Users
    The Run Flows permission for the Guest User and Experience Cloud External User profiles is no longer available in new orgs, starting in Winter ’22. Without the Run Flows permission, you’re free to use the more granular permission structure embedded in Flows and give your users the detailed access they need. Run Flows will be removed from all orgs in the Summer ’22 release. To avoid future access issues, we recommend updating your existing sites to the new permission structure before the Summer ’22 release.
  • Removal of Guest User Access to Recognition Badges in Experience Builder Sites (Release Update)
    To make sure that recognition badges aren’t visible to guest users unintentionally, the default rules now allow only authenticated users to see them. But you can turn off the default setting if you prefer. This update was first made available in Winter ’22 and is enforced in Winter ’22.

Security and Sharing (salesforce.com)