{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":37316,"path":"order-management/cpq-user-access-control-ref.md","title":"User Access Control reference","bundle":null,"doc_type":null,"release":"australia","body":"\n# User Access Control reference\n\nControl Admin access levels using CSV imports. Assign NONE, READ, EDIT, or ADMIN permissions to specific areas.\n\n**Note:** The User Access utility is enabled via a support request. Open a ticket by using the [ServiceNow Support portal](https://support.servicenow.com). For step-by-step instructions, see [Create a case on Now Support for CPQ Customers](https://support.servicenow.com/kb?sys_kb_id=d67d3e71475d7a90f64de825126d4326&id=kb_article_view).\n\n## Access levels\n\n-   NONE\n-   READ\n-   EDIT\n-   ADMIN\n\n## Access areas\n\n-   END\\_USER\n-   CONFIG\n\n    Users with ADMIN can use the Matrix Loader.\n\n-   TRANSACTION\n\n    Users with ADMIN can use the Matrix Loader, including product filters and the catalog enrichment script.\n\n-   MANAGED\\_TABLES\n-   TABLE\n\n    Applies permissions for an individual table listed in addition to any MANAGED\\_TABLES access level. Examples:\n\n    -   MANAGED\\_TABLES: NONE + TABLE “myTable” Edit = ability to edit “myTable” only\n    -   MANAGED\\_TABLES: READ + TABLE “myTable” Edit = ability to read all tables and edit \"myTable\"\n-   DEPLOY\n    -   Applies all blueprint, transaction, product catalog enrichment, and product filter deploys\n    -   Roles are either NONE or ADMIN\n-   UTILITIES\n    -   Logs, user access, runtime clients, admin API keys, external connections, settings, webhooks, connections\n    -   Products \\(for Ecommerce tenants\\)\n-   Access to specific resources\n\n    Tables: Users can be limited to specific tables they have access to. This is done via CSV as well as API.\n\n\n## User roles\n\n-   END\\_USER: This is the only permission for the runtime\n-   CONFIG\\_NONE / CONFIG\\_READ / CONFIG\\_EDIT / CONFIG\\_ADMIN\n    -   READ correlates to GET endpoints\n    -   EDIT additionally correlates to POST PUT PATCH DELETE endpoints\n    -   ADMIN additionally correlates to Matrix Loader endpoints\n-   TRANSACTION\\_NONE / TRANSACTION\\_READ / TRANSACTION\\_EDIT / TRANSACTION\\_ADMIN\n    -   READ correlates to GET endpoints\n    -   EDIT additionally correlates to POST PUT PATCH DELETE endpoints\n    -   ADMIN additionally correlates to Matrix Loader endpoints\n-   MANAGED\\_TABLES\\_NONE / MANAGED\\_TABLES\\_READ / MANAGED\\_TABLES\\_EDIT / MANAGED\\_TABLES\\_ADMIN\n    -   READ correlates to GET endpoints\n    -   EDIT additionally correlates to POST PUT PATCH DELETE endpoints\n    -   ADMIN additionally correlates to Matrix Loader endpoints\n-   DEPLOY\\_NONE / DEPLOY\\_ADMIN \\(no EDIT or READ\\): ADMIN everything deployment related, including Product Filter Rules and Product Catalog Enrichment Deployments\n-   UTILITIES\\_NONE / UTILITIES\\_READ / UTILITIES\\_ADMIN \\(no EDIT\\)\n    -   READ correlates to GET endpoints\n    -   ADMIN correlates to everything else\n\n**Related topics**  \n\n\n[Using CPQ user access management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/order-management/cpq-using-uam.md)\n\n[User access](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown)\n\n"}}