Experience Cloud:
Salesforce Experience Cloud lets you create branded digital experiences to share information and collaborate with people who are key to your business processes, such as customers, partners, or employees.
Whether you call it a portal, help forum, support community, or something else, an Experience Cloud site is a great place to connect with the important folks in your life.
Ways of Giving Access and Permission to External Users:
Set Your Org’s External Org-wide Defaults.
Sharing Rule.
Set Profile Level Access.
Set Your Org’s External Org-wide Defaults:
Org-Wide default sets the baseline level of visibility for each object for your Internal & External Salesforce Org User.
External Org-Wide Defaults sets the baseline record access for External Users.
These are the first line of defense when giving access to data to External Users.
So if you want to give full access to a particular object then → Go to Sharing Settings and Enable Default External Access Sharing model → Set the Objects to Public Read or Public Read/Write.
For Example: If you want to give access to External Users for the Opportunity object:
From Setup, enter Sharing Settings in the Quick Find box, then select Sharing Settings.
Click Edit in the Organization-Wide Defaults area.
For the Opportunity object, set the Default Internal Access to Public Read/Write and the Default External Access to Public Read Only. Click OK if you get any popups or warnings and Save.
If we want to give access related to Omnistudio or Vlocity then
From Setup, enter Sharing Settings in the Quick Find box, then select Sharing Settings.
Click Edit in the Organization-Wide Defaults area.
For the Vlocity object, Search vlocity (ctrl+F), Set the Default Internal Access to Public Read/Write and the Default External Access to Public Read Only. Click OK if you get any popups or warnings and Save.
Repeat the above step for Omni-related Objects.
From Setup, enter Sharing Settings in the Quick Find box, then select Sharing Settings.
Click Edit in the Organization-Wide Defaults area.
For the Omni object, Search Omni (ctrl+F), Set the Default Internal Access to Public Read/Write and the Default External Access to Public Read Only. Click OK if you get any popups or warnings and Save.
Sharing Rule:
Sharing rules grant additional access to records on an object-by-object basis, regardless of where users fall on the role hierarchy.
You can create sharing rules based on the owner or based on criteria. You can even set up sharing rules specifically for guest users in your portal or site.
We need to set up some sharing rules for Omnistudio and Vlocity, for example:
Omni Data Transformation Sharing Rules
Omni Process Sharing Rules
OmniScript Saved Session Sharing Rules
Omni UI Card Sharing Rules
Omni User Session Sharing Rules
Saved OmniScript Sharing Rules
Vlocity OmniScript Sharing Rules
Vlocity DataRaptor Staged Data Sharing Rules
Vlocity DataRaptor Object Interface Sharing Rules
Vlocity DataRaptor Map Item Sharing Rules
Vlocity DataRaptor Bundle Sharing Rules
Vlocity DataRaptor Batch Queue Sharing Rules
For all these above Sharing rules follow the below step to share with an experience Cloud Community.
From Setup, enter Sharing in the Quick Find box, then select Sharing Settings.
Click New under every(Eg: Omni Data Transformation Sharing Rules) Sharing Rules, and enter the following.
Label: You can give anything.
Rule Name: [autopopulates]
Rule Type: Guest user access, based on criteria
Select which records to be shared:
Criteria: Select Field as OwnerId or CreatedById Does Not Equal to Null
Select the users to share with: Select Your Community Name
Select the level of access for the users: Read Only and Save.
Set Profile Level Access:
First and foremost we need to clone the appropriate profile and make the changes based on the requirements.
To Enable Apex Class Access in the cloned Profile follow the below steps.
From Setup, enter the Profiles or Permission Set that you want to grant access to
Select a profile
In the Apex Class Access page or related list, click Edit
Select the Apex classes that you want to enable from the Available Apex Classes list and click Add and Save.
To grant a profile access to a custom metadata type:
Go to the profile that you want to grant access to
Under Enabled Custom Metadata Type Access, click Edit
Add the custom metadata type to the list of enabled custom metadata types.
To give permissions for a profile to read or write access to an Object (Standard or Custom Object).
Go to the profile that you want to grant access to then Click Edit
Under Standard Object or Custom Object Access, Give Access by checking the checkbox of Read, Edit, Delete, etc.
And also we need to give access to Omnistudio/Vlocity Object (Standard & Custom Object)
To give access to Omnistudio/Vlocity general Permission
Go to the profile that you want to grant access to then Click Edit
Under General User Permissions, Give Access by checking the checkbox of Enables consumers and partners to execute OmniScripts, DRs, and Cards through a Community or off the platform.
