User Creation and Authentication13% of the exam

Site membership with profiles and permission sets

How users get into a site: membership through profiles and permission sets (never permission set groups or public groups) under Administration > Members, what adding or removing them does, welcome emails and Preview status, adding membership with Data Loader when nobody can open Workspaces, and keeping internal or broad profiles out of external sites.

Official exam objective
Identify how to grant users access to an Experience.

~8 min read · 8 practice questions ·

What the exam expects

  • Grant site access by adding profiles or permission sets under Experience Workspaces > Administration > Members, and know what can't be added (permission set groups, public groups).
  • Pick a permission set over a cloned profile when only part of a profile's users should get in.
  • Predict the effect of adding a permission to a membership permission set, removing a profile, or deleting an associated profile.
  • Explain when members get welcome emails and how Preview testers reach the site.
  • Add membership through Data Loader when no admin can open Workspaces, and keep internal or broad profiles out of an external site.

Key terms: site membership (the set of profiles and permission sets whose users can log in to a site); Members (the Administration page in Experience Workspaces that holds it); welcome email (login details sent to new members of an Active site); NetworkMemberGroup (the object that stores a profile or permission set's membership in a site); least privilege (only the access a site needs).

Key facts

Where membership lives
Detail
Experience Workspaces > Administration > Members
Membership grants
Detail
Profiles and permission sets, not permission set groups
New assignees
Detail
Gain access automatically
Removing a profile
Detail
Access lost unless another associated profile or permission set remains; posts stay
Deleting an associated profile
Detail
Not allowed until it is removed from the site
Welcome emails
Detail
Sent when the site is Active and emails are enabled
Preview status
Detail
Only members with the login URL can view the site
Non-member admin
Detail
Insert networkId and parentId into Network Member Group with Data Loader
Security control
Detail
Only custom least-privilege profiles and permission sets in Members
Sources for this section (3)
  • Why does adding a permission to a membership permission set need care?
  • When does removing a profile from Members leave a user's access intact?
  • Which object does Data Loader write to when adding site membership?
  • Which options besides Members does Help list for giving external users site access?

The questions are free to read. Answers with their sources and self-grading are included with the pack.

Keep reading with the Experience Cloud Consultant pack

  • Core concepts
  • Exam traps
  • Worked scenario

The pack includes:

  • All 37 lessons of the Experience Cloud Consultant guide, with reading progress
  • Interactive decision walks and step-by-step sequence steppers
  • Inline practice questions and one-click topic practice (8 questions for this lesson)
  • An official source cited for every claim
  • An AI tutor that answers from the guide
  • Unlimited timed practice exams

Practice for the Experience Cloud Consultant exam