Permissions

Zilliant CPQ divides permissions into two types:

• Static—Load when a user signs in to the system. CPQ applies static permissions with each REST call the user makes. Define static permissions at the role level.

• Dynamic—Restrictions applied to granted permissions at runtime. For example, if a user has the DeleteQuotePermission, you can use a dynamic restriction to restrict them from performing this operation.

  Define dynamic restrictions at the user or user role level. Each restriction is defined for a specific permission.

  In addition, each condition has a business type to which the restriction applies. Supported business types for restrictions are:

  • Quote

  • Sales Item

List of permissions

Available permissions defined in the application schema are:

• ALL PERMISSION

  • ADMIN PERMISSION

  • FLINT PERMISSION

  • CREATE PERMISSION

    • CREATE QUOTE PERMISSION (applies to quotes and agreements under negotiation)

      • CREATE LINE ITEM PERMISSION (applies to quotes and agreements)

    • CREATE ACCOUNT PERMISSION

    • CREATE OPPORTUNITY PERMISSION

  • READ PERMISSION

  • UPDATE PERMISSION

    • UPDATE QUOTE PERMISSION (applies to quotes and agreements under negotiation)

    • UPDATE QUOTE STATUS PERMISSION (applies to quotes and agreements under negotiation)

      • UPDATE LINE ITEM PERMISSION (applies to quotes and agreements)

    • UPDATE ACCOUNT PERMISSION

    • UPDATE OPPORTUNITY PERMISSION

  • DELETE PERMISSION

    • DELETE QUOTE PERMISSION (applies to quotes and agreements)

      • DELETE LINE ITEM PERMISSION (applies to quotes and agreements)

    • DELETE ACCOUNT PERMISSION

    • DELETE OPPORTUNITY PERMISSION

  • PUBLISH AGREEMENT PERMISSION

  • DE-ACTIVATE AGREEMENT PERMISSION

  • REVISE AGREEMENT PERMISSION

As shown in the following hierarchy illustration, lower-level permissions are inherited.

For example, users granted the higher-level CREATE PERMISSION inherit the permissions to create quotes, line items, accounts, and opportunities.

The system checks permissions with each REST/Service call.

For details on assigning permissions to users, read Define permissions for a role in Role management.