Portal Health Check lives in Setup and runs on demand. You open it, pick a report, review the access it shows, and remediate anything that is broader than you intended. The steps below walk through a single pass.
- Open Portal Health Check
From Setup, in the Quick Find box, enter Portal Health Check, then select Portal Health Check. You need Customize Application, Manage Users, and Modify All Data to view the reports.
- Review permissions and field access
Open Administrative and User Permissions and look for risky flags on external profiles. Then open Object Access and Field-Level Security to confirm portal users only see the objects and fields they need.
- Check defaults and sharing rules
Open Sharing Organization-Wide Defaults to confirm external access is locked down at the baseline. Then open Sharing Rules and scan the Number of Portal Users Affected column for any rule wider than expected.
- Remediate outside the report
The reports are read-only, so fix issues in the normal Setup areas. Tighten profiles, adjust field-level security, raise org-wide defaults, or edit the offending sharing rule, then rerun the report to confirm.
Lists the system and user permissions granted to portal profiles so you can catch over-broad flags.
Shows which objects and fields portal users can read, create, edit, or delete.
Lists the default internal and external access for every standard and custom object.
Details each rule granting record access to portal users and the Number of Portal Users Affected.
- The reports are read-only. Portal Health Check never changes settings, so remediation always happens in the underlying Setup areas.
- Coverage has real gaps. Permission sets, criteria-based sharing, manual sharing, Apex sharing, and high-volume portal users do not appear in any report.
- The Sharing Rules report grants rows but does not check object permissions, so cross-reference the Object Access and Field-Level Security report.
- For unauthenticated Experience Cloud visitors, also run the Guest User Sharing Rule Access Report, which Portal Health Check does not replace.