The Omni Security Enforcement introduces enhanced permission validation for CPQ feature
flows for a more secure processing environment. This enforcement requires you to assign extra
permissions for CPQ flows.
Required Editions
| Available in: Classic and Lightning Experience |
| Available in: Enterprise, Unlimited, and Developer
editions. |
The requirement for these permissions varies based on how the CPQ flow triggers:
- Administrators: Admin users have all required permissions. If a permission error occurs,
assign the missing permissions specified in the error message. If an Admin performs CPQ
runtime tasks, follow the standard user instructions to assign the necessary runtime
permissions.
- Automated Process User: CPQ typically uses the Automated Process user for
asynchronous jobs. Other users can also be configured for this implementation, such as the
Platform Integration user. Assign the new permission set CPQ Security Enforcement
Async Jobs to any user who run the asynchronous job. Deploy the updated sample permission set
