10

When I first set up a site, I am always given the option to have the the type of new site be 'Guest' or 'Guest User License'. I have not been able to find any documentation on what the difference is. Does anyone know?

enter image description here

8

The Guest "User license" is designed for public users who access your Site.com or Force.com sites. If Communities is enabled, these users will also have access to public pages in your communities. Site visitors have access to any information made available in an active public site. For each Guest "User license", you can develop one site for your organization.

Note: When I've put "User license" in quotes above, I'm referring to the Guest site type. It's still a User license type, but doesn't require an additional User license.

For Site.com, Developer, Enterprise, Unlimited, and Performance Editions each come with unlimited Guest User licenses.

Force.com sites, Enterprise, Unlimited, and Performance Editions come with 25 Guest "User licenses". Developer Edition comes with one Guest "User license".

Some portals will still require an additional license even for Guests because of the objects you're going to expose or display on the site. If all you're doing is creating a "normal" web site, then you could use a free Guest "User license". However if you were creating a web site that utilized any standard objects from Salesforce that required another license of some kind to view them, then you'd need to have the appropriate License specified for your portal.

One example would be the new Chatter Free Licenses that expose Chatter to visitors through a portal. That would require a Chatter Free License. Another example would be the HVCP (High Volume Customer Portal) License. You can expose Cases and other standard objects with that license. There are other examples I could give, but I hope that gives you the gist of the idea.

For more on this, see User Licenses Overview.

EDITED 6-01-19

I ran across some additional information today that may be helpful and important for members to know about these profiles/licenses.

First, is a link to old documentation on Changing the Guest User Profile from the Site.com Workbook (July 4, 2014). Note that this is a reference to Force.com Sites. To read the full instructions download the PDF from the 2nd link.

Next is a KB article about Guest Users not being able to access Knowledge articles in Communities and how to grant that permission to them. The solutions in that article involve both sharing settings on pages and records, plus settings on profiles that depend on whether the Community uses a VisualForce plus Tabs Template (references are to the Sites Guest User License and Profile) or is a Lightning Community (references to the Guest License and Profile).

On October 3. 1918, according to KB 000273124 Security vulnerability impact on Salesforce Sites & Communities both of these profiles were updated as follows.

  1. Implemented a software fix to block guest user access to specific URL paths on Sites and Communities that guest users weren't meant to access. Because of that update, a guest user will now be directed to an authorized login page or receive an “insufficient access” error message.

  2. For Sites or Communities created after October 3, the Salesforce Technology team updated the process for site and community creation to ensure new guest user profiles default to more limited permissions.

  3. For Sites or Communities created before October 3, 2018, to provide an additional layer of protection, the Salesforce Technology team proactively revoked the standard guest user permissions that were granted by default when the Sites or Communities were created. Those permissions were revoked on October 5, 2018 when the critical update “Restrict Record Access for Guest Users” was pushed to all customers, thus adding an extra layer of data safety for customers. (This action also applies to the custom guest profiles of our legacy Site.com product.)

Because we revoked those permissions, some customers may experience some functional issues within their Sites or Communities. We recommend you review and acknowledge the critical update “Restrict Record Access for Guest Users,” then review your guest users’ access rights via the Public Access Settings on the Site Detail Page or the Guest User Profile settings for your communities in Community Builder. In particular, we recommend reviewing each guest user profile’s “Standard Object Permissions” to ensure access is not granted in error. While some admins may have set these permissions on purpose, we want them to understand the risk associated with using these settings.

We also advise that you read the Public Access settings for Salesforce Sites article regarding the use of private external user sharing for the objects you are granting at least read access to. To improve visibility into object permissions for guest users, we added guest user information to Portal Health Check reports.

While we are continuing to investigate the potential impact on our customers, we do not have evidence that this vulnerability resulted in any malicious activity.

We apologize for any inconvenience you have experienced as a result of this issue.

As a final note, also of interest is KB 000212470 Enable 'Person Accounts' for 'Guest User Profile' in Site.com.

It would appear that depending on what you've read as a reference, it ultimately depends on how your site/community was implemented as to whether one or both of these licenses and profiles applies to it.

| improve this answer | |
  • 1
    I'm a little lost with your answer. Exactly when should I choose Site Type Name "Guest" and when should I choose Site Type Name "Guest User License"? I have not been asked this question in dev orgs where the User automatically created has been called "XXX Site Guest User" and the User License has been "Guest". That sounds like the first Site Type Name. – Keith C Jul 31 '14 at 16:55
  • I can see why you say that now that I've re-read my answer. The Guest User license is designed for public users who access your Site.com or Force.com sites. If Communities is enabled, these users also have access to public pages in your communities. So a Guest User would be appropriate when you want to expose objects using public pages via your Community within the security and license requirements of those Objects (meaning no Opps, Events, etc and typically read-only). – crmprogdev Jul 31 '14 at 19:33
  • 2
    Did you ever get an answer to this one? I just ran into the same screen in an org when creating a new Force.com. I'm not asked to make this selection in other orgs. – Stacey Chale Feb 25 '15 at 21:49
  • 1
    @BrianMiller Each Profile is associated with a license. The Guest User Profile is associated with the Force.com Sites License while the Guest Profile is a newer profile associated with Communities and Salesforce.com Sites. Both can be modified to give Read and/or Edit permissions (clone them first) for custom objects along with certain Standard Objects as well depending on internal org sharing settings. – crmprogdev Jun 1 '19 at 14:58
  • 1
    @BrianMiller You're welcome. While there's still ambiguity, I hope the updates gave you the clarity you needed. – crmprogdev Jun 3 '19 at 14:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.