Grant Permissions to Community's Site Guest User

Edit the Profile

The community's Site Guest User interacts with the login, registration, and forgot password screens of the community. That user needs to be able to do the things that happen as a result of registering, including:

  • Creating and updating the contact
  • Converting any lead that already exists for the registering email
  • Creating the account
  • Creating the portal user
  • Creating the application

So the community's Site Guest User needs access to fields on all these objects, as well as access to various objects and fields in which configuration information is stored.

Follow these steps:

  1. From Setup search for “Sites” in the Quick Find box, click the “Sites” link, then click on the “Site Label” for your community to view the details.
  2. Next, click on the “Public Access Settings” button at the top of the Site Details Page. This opens the profile of the Site Guest User.
  3. Give the profile Read and Create permissions on these objects:
    • Account
    • Contact
    • Leads
    • If you have ERX Core installed: Application
  4. Give the profile Read on:
    • All parent objects of the Contact (that is, all objects to which the Contact has a lookup relationship)
    • If you have ERX Core installed: Status Tracking, and all parents of the Application (that is, all objects to which the Application has a lookup relationship)
    • Any objects you wish to reference in configuring Custom Registration Fields
      • For example, if you have ERX Core installed, and you wish to gather information like the registrant’s intended program of study on the registration page, then you will need to grant permission on the Program Offered object.
    • If, as a result of the registration process, any other objects get created (for example, you may be creating Admissions Documents as an immediate result of registration), then any such object created or referenced in that context will need “Read” and ”Create” object permission and “Edit” field level access for the Site Guest User.
  5. Give the profile Field Level Security “Read Access” to all fields on the above mentioned objects that need to be read or updated in the course of Registering for the portal.
  6. Configure the Password Policies. Although this is not the profile that will be assigned to the new community members who register, the “Password complexity requirement” on this profile will govern what passwords are acceptable.

The community Site Guest User also needs permissions on components of the FormBuilder Rx managed package, but these are all contained in the Permission Set called ERxFB_Registration, which is assigned automatically to your community’s Site Guest User when you configure its environment.

FormBuilder Rx Summer '20 and Earlier

Site Guest Users cannot be given permission through standard Salesforce settings to update or delete existing records. We use a Custom Setting to allow you, the System Administrator, to designate any objects that you wish to allow the Site Guest User to update (or delete). If you're using FormBuilder Rx Summer '20 or earlier, you will need to give the Site Guest User permission to update the Application object in order for Portal Registration to work.

  1. Go to Setup > Custom Settings > Allow Object Access (FormBuilder) > Manage. Create a Default Organization Level Value, leaving all fields except “Location” blank. Then, create a record for the community’s Site Guest User Profile.
  2. For the Portal/Community Site Guest User Profile, add the Application object’s API name EnrollmentrxRx__Enrollment_Opportunity__c to “ByPass Update” and any Application fields used on the Registration form, for example: