Security16% of the exam
App sharing access levels and Experience Cloud sites
What Viewer, Editor and Manager access allow, how the Shared App and My Private App behave, why assets split across apps need access to both, what asset visibility and app deletion really do, and how to share an app with an Experience Cloud site.
Implement app sharing based on user and group requirements.
~7 min read · 16 practice questions ·
What the exam expects
- Choose Viewer, Editor or Manager access for a user, public group or role from what they must do with the app.
- Explain the default Shared App and My Private App, and where to put sensitive or personal work.
- Fix a dashboard that users can't view because its dataset lives in another app.
- Use asset visibility for drafts, and plan app deletion and manager deactivation without losing assets.
- Share an app with an Experience Cloud site: the Share dialog setting, Viewer-only members, embedding, and where the datasets must live.
Key terms: app (a folder of datasets, lenses and dashboards whose sharing controls access to them); Viewer / Editor / Manager (the three app access levels); Shared App (default app every user can view); My Private App (each user's personal app); asset visibility (hides selected assets from Viewers).
Key facts
Shared App default
- Detail
- Every user starts with Viewer; admins can change it
My Private App
- Detail
- Contents hidden from admins; its dashboards and lenses can be shared
Share an app
- Detail
- Use CRM Analytics and Manager access; user, group or role
Sharing limit
- Detail
- 1,000 users, roles and public groups combined
App name
- Detail
- 40 characters maximum
Dashboard and dataset in different apps
- Detail
- User needs access to both apps
Asset visibility
- Detail
- Editors and Managers set it; not a security control
Delete an app
- Detail
- Manager only; removes its lenses, dashboards and datasets for good
Deactivated Manager
- Detail
- Loses share and delete access; assign another Manager first
Site members
- Detail
- Viewer only; can't create, update or delete assets
Site dashboards' datasets
- Detail
- Must be in the app shared with the site
Sources for this section (7)
- App-Level Sharinghelp.salesforce.com (opens in a new tab)
- Share an Apphelp.salesforce.com (opens in a new tab)
- CRM Analytics Limitationshelp.salesforce.com (opens in a new tab)
- Create an Apphelp.salesforce.com (opens in a new tab)
- Asset Visibilityhelp.salesforce.com (opens in a new tab)
- Delete an Apphelp.salesforce.com (opens in a new tab)
- Share in Experience Cloud Siteshelp.salesforce.com (opens in a new tab)
- How many users, roles and public groups combined can one app be shared with?
- Why isn't the Delete dialog's list of affected assets a complete dependency check?
- When can a Viewer still open a hidden dashboard?
- Which REST API method can site users call on assets shared with their site?
- What is the longest name a new app can have?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the CRM Analytics and Einstein Discovery Consultant pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 26 lessons of the CRM Analytics and Einstein Discovery Consultant guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Practice exams purchase adds inline bank questions and topic practice (16 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Choose guide-only, practice-only, or save $4 with both