Omnistudio designer, runtime and site user permissions
Key Takeaway
Building Omnistudio components needs the Omnistudio permission set license plus the Omnistudio Admin permission set. Viewing Omnistudio content in Lightning Experience needs the same license plus Omnistudio User. Experience Cloud site users are set up separately, with their own profile and a custom permission set.
Omnistudio separates the people who build components from the people who only run them. Create/Edit users can create and edit Omnistudio components such as Flexcards, Omniscripts, Data Mappers and Integration Procedures. Read-Only users run those components but must not be able to create or edit them. Experience Cloud site users, such as authenticated, partner and guest users, have their own setup. For each type of user, a consultant plans the right permission set license, permission set or permission set group, and profile. Salesforce recommends using permission sets together with Roles and Sharing Rules to manage the access levels of different users.
Omnistudio Admin and Omnistudio User permission sets
The Omnistudio Admin permission set license has been renamed Omnistudio. The Omnistudio permission set license now includes two permission sets: "Omnistudio Admin" and "Omnistudio User". Users need these permission sets assigned to get base-level access to the records of each Omnistudio object.
Omnistudio Admin grants admins and designers full Create, Read, Update, and Delete (CRUD) access to Omnistudio objects. Omnistudio User grants consumers Read access to Omnistudio objects. The object behind each component type is shown in parentheses.
| Omnistudio Admin | Omnistudio User | |
|---|---|---|
| Flexcards (Omni UI Card) | Create, Read, Update, Delete | Read |
| Omniscripts (Omni Process) | Create, Read, Update, Delete | Read |
| Integration Procedures (Omni Process) | Create, Read, Update, Delete | Read |
| Data Mappers (Omni Data Transformation) | Create, Read, Update, Delete | Read |
| OmniGlobalAutoNumber | Create, Read, Update, Delete | Read and Update |
Omnistudio User also grants Read on OmniInteractionAccessConfiguration. It grants Create, Read, Update and Delete on Omniscript Saved Session as well.