Question

Difficulty: HardSelf-Service Portals and Experience Cloud for Support

A system administrator at a SaaS company is configuring Experience Cloud for customer self-service support. Match each business requirement to the correct Salesforce configuration or feature.

  • Grant external users with standard Customer Community licenses read access to all Cases associated with their parent Account.Configure a Sharing Set mapping the Contact's Account to the Case's Account.
  • Prevent internal executive roles from automatically inheriting access to portal-owned records via role hierarchy when External OWD is Private.Deselect 'Grant Access Using Hierarchies' on the target object's organization-wide default settings.
  • Allow a client's designated manager to create new portal user accounts and reset passwords for contacts belonging to their company.Assign Customer Community Plus licensing and grant Delegated External User Administration capabilities.
  • Enable unauthenticated website visitors to search and view published support Knowledge articles without prompting for a login.Enable Public Access in Experience Builder and grant Read permission on Knowledge to the Guest User Profile.

Answer

Matching pairings: 1) Account Case access for standard Customer Community licenses maps to Sharing Sets. 2) Restricting role hierarchy access maps to deselecting 'Grant Access Using Hierarchies'. 3) External user creation by customer managers maps to Customer Community Plus licenses with Delegated External User Administration. 4) Unauthenticated Knowledge search maps to enabling Public Access and configuring the Guest User Profile.
Each requirement correctly pairs with its Salesforce Experience Cloud capability: Customer Community record access across accounts requires Sharing Sets due to lack of role access; hierarchy access restrictions require deselecting 'Grant Access Using Hierarchies'; delegated admin features require Customer Community Plus licenses with roles; and unauthenticated access requires Experience Builder Public Access and Guest User Profile permissions.

Step-by-Step Solution

1
Analyze license capabilities and record sharing mechanisms for Customer Community users.
Standard Customer Community users do not utilize roles or criteria-based sharing rules, requiring Sharing Sets to grant access to Cases associated with their Account.
Sharing Sets use account/contact lookup relationships to grant access to external community members efficiently.
2
Evaluate role hierarchy override settings for external sharing models.
Deselecting 'Grant Access Using Hierarchies' disables record visibility escalation up the internal role hierarchy for custom objects.
This enforces strict record privacy boundaries when External Org-Wide Defaults are set to Private.
3
Determine licensing requirements for delegated administrative capabilities.
Delegated External User Administration requires roles, which are supported by Customer Community Plus or Partner Community licenses.
Standard Customer Community licenses lack role functionality required for user administration privileges.
4
Review configuration steps for anonymous guest user access.
Public Access in Experience Builder combined with Guest User Profile permissions exposes published Knowledge articles to unauthenticated visitors.
Guest User Profiles define security access for unauthenticated portal traffic.

Key Concept

Experience Cloud Licensing Capabilities and External Security Architecture
Rate this question