Required permissions for the integration user

  • Release version: Zurich
  • Updated October 8, 2025
  • 1 minute to read

    • The integration user, or refresh token user, must have the following permissions if it does not already have system administrator permissions.

    The refresh token user (or integration user) is the user name that ServiceNow CPQ uses for API syncing of Configuration Line Data, Configuration Data, and to populate the caches of Product2, Pricebook, and Pricebook Entries in Salesforce. This sync occurs every 30 minutes for test and demo sites and every 15 minutes for production sites. Although using a system administrator as your refresh token user is the simplest and most common route to take when configuring ServiceNow CPQ, some ServiceNow CPQ customers prefer not to define their refresh token user with system administrator permissions (usually because of a company-wide security policy). The following list shows the necessary permissions for non-admin profiles to be set up as refresh token users when using ServiceNow CPQ with Salesforce CPQ:

    • The user must be API enabled
    • The LGKConfigurationLineItemc and LGK ConfigurationFieldDatac objects must have Create access
    • The objects Product2, Pricebook2, and PricebookEntry must have Read/View access, including access to the following fields:

      Product2:

      • Name
      • Id
      • ProductCode
      • Description
      • IsActive
      • Family
      • ExternalId
      • SBQQ_ExternallyConfigurable_c
      • QuantityUnitOfMeasure
      • StockkeepingUnit

      Pricebook2:

      • Id
      • Description
      • IsActive
      • IsStandard
      • CreatedDate
      • LastModifiedDate

      PricebookEntry:

      • Id
      • Pricebook2Id
      • Product2Id
      • UnitPrice
      • IsActive
      • UseStandardPrice
      • ProductCode
      • CreatedDate
      • LastModifiedDate
      • CurrencyIsoCode (if using multicurrency)
      • ProductSellingModelId