To improve the security of your data, Salesforce is removing guest user assignments from permission sets and permission set groups associated with permission set licenses that contain View All, Modify All, edit, and delete standard object permissions. You can no longer assign guest users permission sets or permission set groups that are associated with permission set licenses that contain the restricted permissions. The only standard object permissions allowed for guest users are read and create. This update was first available in Spring ’22 and is enforced in Winter ’23.
Where: This change applies to Aura, LWR, and Visualforce sites accessed through Lightning Experience and Salesforce Classic in Enterprise, Performance, Unlimited, and Developer editions.
When: Starting in Spring ’22, you can no longer assign guest users permission sets or permission set groups associated with permission set licenses that contain View All, Modify All, edit, and delete standard object permissions.
During the Winter ’23 release, Salesforce enforces this update and removes the affected permission set and permission set group assignments from guest users. If you’re affected, Salesforce Customer Support contacts you directly about your process and timeframe for the update.
Why: This update protects the security of your data by preventing guest users from being granted object permissions not required for their business needs.
How: Customizations, such as workflows, that rely on guest users being granted these object permissions can be affected after this change. To prevent disruptions in functionality, we recommend that you review and remove overly permissive permission sets, permission set groups, and licenses from guest users before the Winter ’23 release. In the Summer ’22 release, some replacement permission set licenses that are intended for guest users and that contain only the allowed permissions became available.
To review this update, from Setup, in the Quick Find box, enter Release Updates, and then select Release Updates. For Remove Guest User Assignments from Permission Sets Associated with Permission Set Licenses with Restricted Object Permissions, follow the testing and activation steps.
Remove Guest User Assignments from Permission Sets Associated with Permission Set Licenses with Restricted Object Permissions (Release Update) (salesforce.com)