We have around 900 users in the system, and out of those, approximately 130
users have CPQ access and can view CPQ-related data.
However, many users who do not have CPQ access also require visibility to these reports. Could you please suggest how we can provide CPQ report record access to non-CPQ users without granting them full CPQ access?
Please advise on the best possible approach.
#Trailhead Challenges
@Kiran Kharade - Vashi Integrated Solution Ltd depends on what you mean by "view CPQ report data."
If the users need to open reports that are built directly on CPQ objects such as CPQ Quotes, Quote Lines, Subscriptions, Contracts, or other SBQQ__ package objects, then report folder access alone will not solve it. They still need the required object, field, record, and package/license access behind those reports. Salesforce’s CPQ permissions guidance states that CPQ access is controlled through CPQ licenses and package-specific permission sets (Get Started with Salesforce CPQ Permissions)
Recommended option is to give CPQ licenses only to users who need direct access to CPQ records, then create a restricted read-only permission model for them as much as CPQ allows.
For non-CPQ users, the safer approach is not to expose the CPQ objects directly. Create a separate reporting layer, such as a custom reporting object, summary object, scheduled snapshot, CRM Analytics dataset, or exported BI dataset, containing only the fields they are allowed to see. Then report on that object/dataset instead of the live CPQ package objects. That gives visibility without opening full CPQ record access.
A dashboard with a running user may work for high-level summary visibility, but it should not be treated as a clean replacement for proper CPQ licensing or record access, especially if users need to drill into report details.
My recommendation is: direct CPQ report access usually requires CPQ access. For non-CPQ users, create a controlled summary/reporting layer and expose only the required CPQ data there.