---
title: "Read restriction rules"
slug: "read-restriction-rules"
description: "Learn how to create conditions and then use them to establish read restriction rules in Zilliant CPQ."
tags: ["Read restriction rule", "Conditions"]
updated: 2025-02-14T17:12:45Z
published: 2025-02-14T17:12:45Z
canonical: "docs.zilliant.com/read-restriction-rules"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.zilliant.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Read restriction rules

Use read restriction rules to grant or limit access to objects like quotes, accounts, and agreements based on dynamic conditions. These rules provide flexibility to model your business requirements around protected access to business data.

For example, a read restriction rule lets you limit user access only to their own quotes and agreements or allow them to modify opportunities only within their assigned organizational unit.

CPQ includes the following predefined restriction rules:

- **Accounts**
  - User has access to account if user is its creator
  - User has access to account if user is its owner
  - User has access to account if user is one of its partner functions
- **Quotes and agreements under negotiation**

> [!NOTE]
> Tip
> 
> Even though the rule names include only the word "quote," they apply to both [quotes](/v1/docs/about-quotes) and agreements under negotiation. If you use only [agreements management](/v1/docs/agreements) capabilities in Zilliant CPQ, you can still use these predefined rules.
  - User has access to quote if user is its creator
  - User has access to quote if user is its owner
  - User has access to quote if user is one of its partner functions
  - User has access to quote if user has access to its account
  - User has access to quote if its creator's Organization Unit is in the hierarchy of the user's Organization Unit
- **Published agreements**
  - User has access to agreement if user has access to its account

## View read restriction rules

1. From the application left navigation area, select **Administration**.
2. On the top navigation bar, select **Master Data Management**.
3. Scroll or search, then select **Read Restriction Rule** to view the list of defined rules.

## Define conditions

Each read restriction rule must include at least one condition. To define a new condition:

1. From the application left navigation area, select **Administration**.
2. On the top navigation bar, select **Master Data Management**.
3. Scroll or search, then select **Condition**.
4. Select ![](https://cdn.document360.io/24f960e8-3c1c-4c18-a2c6-83b6ae4aab84/Images/Documentation/add_42dp_1A1A1A%20(1).png?sv=2026-02-06&spr=https&st=2026-11-11T12%3A20%3A54Z&se=2026-11-11T13%3A20%3A54Z&sr=c&sp=r&sig=YuuCVChcw0hCF8IW93ev7J3MkhNqr7ttPTgPfGxSiLQ%3D) to add a line to the list of conditions, then select it.
5. Enter or select values to create the condition:
  - **Name**—Enter a unique name for the condition. This name appears in the list of conditions used to assign to a rule.
  - **Business Type**—Select the object, such as account, opportunity, or quote.

> [!WARNING]
> Note
> 
> - For agreements under negotiation, select **Quote** as **Business Type**.
> - For published agreements, select **Agreement** as **Business Type**.
  - **Attribute**—Select an attribute, such as creator, owner, or organization unit.
  - **Operator**—Select an operator value.
  - **Condition Value**—Select a value used to perform the respective test. Available values depend on the selections made for **Business Type** and **Attribute**.
6. Select **Save**.

## Define read restriction rules

1. From the application left navigation area, select **Administration**.
2. On the top navigation bar, select **Master Data Management**.
3. Scroll or search, then select **Read Restriction Rule**.
4. Select **+** to add a line to the list of read restriction rules, then select it. Enter or select values to create the read restriction rule:
  - **Name**—Enter a unique name for the read restriction rule.
  - **Rule Status**—Define whether the rule is active or inactive.
  - **Conditions**—Select conditions to apply to this rule. The system grants users access only when all conditions are true.
5. Select **Save**.

> [!WARNING]
> Note
> 
> If you use both [agreements management](/v1/docs/agreements) and [quoting](/v1/docs/about-quotes) capabilities in Zilliant CPQ, you must create the **Is Quote Agreement** condition and add it to all rules for agreements under negotiation. To create the condition, follow [these steps](/v1/docs/read-restriction-rules#define-conditions) and enter the following information:
> 
> - **Name**—Is Quote Agreement
> - **Business Type**—Quote
> - **Attribute**—Is Quote Attribute
> - **Operator**—equal to
> - **Condition Value**—true