Couldn't get any of the guest links to work

None of the experience cloud/guest links worked for me, which was the whole reason for installing this package. Made sure the guest profile had access to the VF page so I'm not sure what else I'm missing.

Support

I'm currently testing this tool. If I have any support questions who is the best to speak to?

Hi Edyta - You can post here or send me a message on the Trailblazer Community and I will try to help as much as possible.

An Invaluable Tool for Security and Compliance Consultants!

Firstly, a huge thank you to George for creating such a time-saving solution. Without it, I'd be stuck doing everything manually. This package truly deserves more than just 2 stars, especially considering that some users clearly can't read the documentation. It is great for identifying data leakages especially on community sites and also to find any IAM principle violations before they make it to prod.

Thanks for the great review and feedback Leonard! Glad you found it helpful!

Very powerful tool - simple to meet my needs

(Ok first of all some of these reviews are wack, someone gave it 2 stars because they thought installing an appexchange app changed the template of their site????) This is clearly a very powerful tool. I've only played around for about 20 minutes now and here are some of my favorite parts. - Easy list of links to the guest user profiles for all of my sites. This is typically a PITA to get to - Easy list of links to use for viewing the user access for all of my sites. This is nice because I don't have to do a bunch of copying and pasting - I can print the webpage and keep it on file for later review Things I haven't figured out yet/wish were different - Can I view field-level security? - I wish it wasn't managed code so that I could modify Excited to watch the full demo and do a deep dive on the very thorough documentation.

Thanks for the great review and feedback Mimi! To answer your questions: 1. FLS is not included right now, mostly because of the complexity and size of this report right now. I will consider this as a future feature. 2. I totally understand where you're coming from on this, and I will consider taking this through reviews to get it open-sourced, but not sure if/when this will happen. With that said, even if this was open-source, I would caution with code changes just due to the complexity and multi-dimensional traits of dealing with dynamic org metadata in the code, and the size of the metadata that ends up in the report for some orgs. I say this from personal experience and long hard hours of banging my head against keyboards trying to navigate the maze of complexity to make the smallest changes -- not saying it's impossible, but it's definitely not easy :) Please keep the feedback coming and let me know if you have any further questions as you use the app more!

Not usable for guest user access report, too difficult

The tool is supposed to help to find out Guest User permissions/access. It is recommended by security@salesforce.com to be run to detect any issue. Why is it so tricky ? Only real nerds can understand how to make it work for a guest user. The only 2 lines in the user guide with no screenshot are insufficient. You are Salesforce, please provide a tool where I enter the profile or username and it provides a result. Salesforce obliges us to have guest users for technical reasons, it is not a decision from me, so I expect a clearer / more user-friendly tool to check what my guest user can access or not .

Hi Vincent, thanks for the feedback. If it was technically possible to do what you say, we would've done it in this package, but it's not technically possible. As far as using this package, there is extensive documentation here (also linked from the listing): https://useraccessreportandmonitoring.substack.com/p/documentation with text instructions, Screenshots, and Videos that cover the functionality of this package and how to use it. I recommend that you spend some time reviewing that material and come back with specific questions that you might be stuck on - would be happy to help clarify any.

Question about security & privacy

Is any of the org's data/metadata sent outside of where the org resides for processing?

No, all the processing and data happen in the same org.

Great product for finding out what access the guest and regular users have to the data in your org

The app just works - please read the detailed instructions as they have a lot of very detailed information in them. I use the tool as part of my assessments I do for customers when they have Salesforce Digital Experiences (Communities) or Force.com Sites. It does not affect anything in your org, it can be removed without any issue. There are some limitations to the size of the responses, however the author cannot really change that as the limitations are due to it being run totally on Salesforce.

Issues on Communities

When i installed to package , after that i see the builder option gone from the communities also the Framework got changed to visualforce from aura. Any resolution for this? tried on two orgs back to back

Ok Thanks for the confirmation George

The package does not change the template of any site in your org. Something / someone else caused the template change in your org, not this package.

But it did changes the template of communities in my org. thats why i could not see the builder option later when i changes the template to aura , i could see the builder option. Can you please check this and confirm when we install this then for active communities , it is changing the template?

Installing this package does not change the framework or remove any options from the org on any site. The package offers an Admin app which runs in Lightning Experience, and the report itself is a visualforce page report which runs as a certain user that you would need to login as, whether that's an internal user or an experience cloud user or a guest user. Please review the documentation provided for more information: https://useraccessreportandmonitoring.substack.com/

Helpful for determining who owns what

A super helpful way to figure out what records a user owns so you can determine what objects have records to reassign should they leave

Help & Support

Elevate Your Agents with AgentExchange Solutions

Have Questions?

Authenticated and Guest User Access Report and Monitoring

Watch Demo

Watch Video

Showing 10 of 11 Reviews