In Winter '22, Salesforce discontinued the Run Flows permission for the Guest User and Experience Cloud External User profiles in new orgs, and in Spring '23, Salesforce will remove Run Flows from the Guest User profile in all orgs. This change improves site security by requiring explicit guest user permissions to run Flows. To avoid future access issues, update your sites to the new permission structure before the release update is enforced. This update was first available in Summer '22 and was scheduled for the beginning of Spring '23, but enforcement is postponed to later in Spring '23.
Location: This update applies to Aura, LWR, and Visualforce sites accessed through Lightning Experience and Salesforce Classic in Enterprise, Performance, Unlimited, and Developer editions.
Date: Salesforce will enforce this update in Spring '23. To find out the major release upgrade date for your instance, go to Trust Status, search for your instance, and click on the maintenance tab.
How: To review and test this update before it's enforced, go to Setup, enter Release Updates in the Quick Find box, and select Release Updates. Follow the testing and activation steps for Require Granular Flow Permissions for Experience Cloud Guest Users.
After this update is enforced, to give your guest users access to a specific flow, select "Override default behavior and restrict access to enabled profiles or permission sets" on the flow. Then add that flow to the Enabled Flows list on the Guest User profile.
0 Comments