Explore how to configure and manage permission sets for Zuora Quotes, utilizing managed package permission sets and permission set groups for effective access control.

To use Zuora Quotes, customers must provide the appropriate permissions to Zuora CPQ objects and fields. This can be done in the following ways:

• Use the managed package permission sets
• (Recommended) Use a combination of managed package permission sets and permission set groups (PSG). See Create permission set group and muting permission set.
• (Not recommended) Create a custom permission set by cloning a Zuora managed package permission set

Zuora recommends using a combination of managed package permission sets and permission set groups. This way, when new permissions are added to the managed package permission set, they are automatically applied to users during upgrades. With a PSG, you can also mute specific permissions that are not needed for your quoting process.

You can compare the Zuora managed package permission sets with your custom permission sets. For more information, see Compare Zuora managed package permission sets with custom permission sets.

In addition, you can create a custom permission set to provide access to standard fields on standard Salesforce objects, since managed package permission sets cannot grant permissions to standard fields on standard objects.

We have included additional security changes as recommended by Salesforce for all the managed package providers. We have updated our Zuora Quotes End User, Zuora Quotes Product Admin, and Zuora Rules End User Permission Sets. It is advised to have at least the Zuora Quotes End User permission set assigned to the user for the normal quoting flow. If you are using your custom permission set for users, then you can verify permissions existing on the Zuora Quotes End User with your custom permission set and adjust your custom permission set to align with the Zuora Quote End User permission set.

For the list of additional permissions added in version 10.46 and above, see Permission Sets.