home

Zuora CPQ

Zuora BillingZuora PaymentsZuora PlatformZuora CPQZephrZuora RevenueAccounts ReceivableZuora AIRelease NotesBasicsEntitlementsSupport and policies
Zuora BillingZuora PaymentsZuora PlatformZuora CPQZephrZuora RevenueAccounts ReceivableZuora AIRelease NotesBasicsEntitlementsSupport and policies

Welcome to Zuora Product Documentation

Explore our rich library of product information

Show Contents

thumbnailZuora CPQ

Sales Rep Agent

Manage OneID users, roles, and groups

Learn how to create roles, organize users into groups, and provision access through OneID.

OneID authentication for Quote Studio connects Zuora OneID, Salesforce, and CPQ tenant so users can authenticate securely before working in Quote Studio.

This setup includes customer admin tasks and end-user tasks. Admins prepare OneID user access, create the OAuth 2.0 client, and configure the Salesforce connection. Each end user then completes a one-time authentication flow in Quote Studio. After authentication is complete, the connection status changes to Configured.

Before users can sign in successfully, Zuora Support must provision the tenant and enable the required feature. OneID user management is also a prerequisite and should be completed before end users perform authentication in Quote Studio. See

  1. Log in to Zuora OneID using your admin credentials.
  2. Perform the following steps to create user roles.
    1. Navigate to User Roles and Permissions from the left navigation menu.
    2. Review the list of existing user roles available for the selected tenant.
    3. If the required role does not exist, click Add New Role.
    4. Enter a name for the role.
    5. Select the permissions to grant to users assigned to the role.

      • For a CPQ Sales Rep Agent admin role, select all permissions in the Billing and Configuration Management sections.

      • For a CPQ Sales Rep Agent user role, select the required permissions in the Billing section only.

      The permissions that you grant determine what billing data and configuration features the user and the Sales Rep Agent can access in Quote Studio.

    6. Click Create to save the role.
    7. Repeat the process for each CPQ tenant as needed.

      Once created, these roles become available for assignment through groups.

  3. Perform the following steps to create a new group.
    1. Navigate to User Groups from the left navigation menu.
    2. Review the list of existing groups.
    3. Click Add New Group.
    4. Enter a group name.
    5. Click Save.
  4. Perform the following steps to assign roles to the group.
    1. Open the newly created group.
    2. Enable the desired tenants.
    3. For each tenant, select the appropriate User Role.
    4. Click Save.

      You can create multiple groups to represent different combinations of tenant access and role assignments.

  5. Perform the following steps to assign users to groups.
    1. Open the user's profile.
    2. In the User Provisioning section, click Edit.
    3. Select one or more groups from the available list.
    4. Review the access preview displayed on the right side of the page.
    5. Save the changes.

      The preview displays the permissions and tenant access the user will receive based on the selected groups.

After users are assigned to groups:

  • OneID provisions the user across the configured tenants.

  • Tenant access is automatically granted based on the group's role assignments.

  • Corresponding tenant tiles display on the user's My Apps page.

The presence of tenant tiles on the My Apps page confirms that the user has been successfully provisioned and granted access to the associated tenants.

Users are centrally managed through OneID and automatically provisioned with the appropriate permissions across CPQ and other Zuora tenants. This ensures consistent access control, streamlined admin, and improved security throughout the Zuora ecosystem.

Last updated: July 13, 2026