---
schema_version: "1"
id: da3912ed221c503a995356264c08cfa00228e2f76724202c21b71c6cb758a642
title: Permissions for CPQ Omnistudio Security Enforcement
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/ind/264-0-0/comms_permissions_for_cpq_omni_security_enforcement.md
canonical_url: https://help.salesforce.com/s/articleView?id=ind.comms_permissions_for_cpq_omni_security_enforcement.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 955b18f2911cd21906c901ec70bab982a8844b1ae42b087f59e8aa4925f5f10f
description: The Omni Security Enforcement introduces enhanced permission validation for CPQ feature flows for a more secure processing environment. This enforcement requires you to assign extra permissions for CPQ flows.
products:
  - Communications
  - Media
  - Energy and Utilities
release: "264"
---
# Permissions for CPQ Omnistudio Security Enforcement

The Omni Security Enforcement introduces enhanced permission validation for CPQ feature flows for a more secure processing environment. This enforcement requires you to assign extra permissions for CPQ flows.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col style="width:100%"></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Classic and Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Unlimited</strong>, and <strong>Developer</strong> editions.</td></tr></tbody></table>

The requirement for these permissions varies based on how the CPQ flow triggers:

- Administrators: Admin users have all required permissions. If a permission error occurs, assign the missing permissions specified in the error message. If an Admin performs CPQ runtime tasks, follow the standard user instructions to assign the necessary runtime permissions.
- Automated Process User: CPQ typically uses the **Automated Process** user for asynchronous jobs. Other users can also be configured for this implementation, such as the **Platform Integration** user. Assign the new permission set CPQ Security Enforcement Async Jobs to any user who run the asynchronous job. [Deploy the updated sample permission set](https://resources.docs.salesforce.com/rel1/doc/en-us/static/misc/CPQOmniSecuritySamplePermissionSets-v2.zip)
    
    ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-ind-comms_media_energy_managed-264-0-0-production-enus/ff4079f6-a384-475c-b863-578bbbb0ef9b/images/icon_note.png)
    
    Note If there are any scenarios where additional permission failures are reported even after adding these permission sets, you can add the respective permissions mentioned in the error message to unblock. Apply the same for FLS permission failures as well.