Record-Triggered Flow on the E-Signature Log & E-Signature Request object
Published on February 10, 2026 DRTE
Automating Updates After Signer Actions: Guest User Limits and the Platform Event Pattern
Question: Can I use a Record-Triggered Flow on the E-Signature Log / E-Signature Request object to automate updates after signer actions (guest user)?
Yes, but with a significant caveat. While you can trigger a flow when an E-Signature Log is created or an E-Signature Request is updated, any DML operations (creating, updating, or deleting records) will likely fail if the flow stays within the original user context (only for guest user context). |
Why do DML operations fail when a signer completes a document?
When a signer confirms their signature, the Guest User profile typically creates the E-Signature Log record and updates the E-Signature Request record to update Is Signed, Response Received on, and Status. In Salesforce's security model, Guest Users have highly restricted permissions and generally cannot edit records they do not own or access objects outside of their limited scope. Since the flow inherits this "Guest User" context, it lacks the elevated permissions required to perform further database changes.
The flow inherits the restricted Guest User context after the signer completes the document.
How can I perform updates if the Guest User is restricted?
To bypass these restrictions, you must switch the execution context from the Guest User to a System User. The most reliable, Salesforce-recommended method for this is using the Platform Event mechanism.
How does the Platform Event approach work?
The process follows these steps:
- The Trigger: The Record-Triggered Flow (running as the Guest User) publishes a custom Platform Event instead of trying to update records directly.
- The Hand-off: Platform Events are processed asynchronously.
- The Execution: A second flow (a Platform Event-Triggered Flow) picks up the event. This second flow runs under the Automated Process User context, providing the elevated permissions needed to perform DML operations across your Salesforce org.
What are the benefits of using this architectural pattern?
- Security: It maintains the integrity of the Guest User profile while allowing necessary business logic to execute.
- Reliability: It prevents flow "Fault" errors caused by "Insufficient Privileges."
- Scalability: This pattern is the standard Salesforce solution for handling complex logic initiated by unauthenticated users.
Result: the first flow only publishes the event. The Platform Event-Triggered Flow runs as the Automated Process User, so your post-signature updates are no longer limited by Guest User permissions. |
Salesforce References
Knowledge Article Number: KA-00110