Choosing What Users Can See

Share individual business objects rather than an entire database. A vendor may need its purchase orders and compliance requests, while a customer may need its service requests and project updates.

Choose Viewer when the guest only needs to read information. Choose Editor only when they must update the shared item. Attachment access is separate and is disabled unless you allow it.

Review the record itself before sharing. External users should not receive internal notes, unrelated child records, or files simply because they happen to be nearby.

Use least privilege: the smallest useful set of content and capabilities.