A cell access rule limits which plan cells specific users can edit. This can be useful when you close a time period, if you want to prevent users from other departments editing actuals, and so on.
When setting up a cell access rule, you can define the following:
The dimension values the rule applies to.
The measures the rule applies to.
The users the rule applies to.
The combination of those three elements determines which plan cells are affected by the access rule, making them read-only.
Cell access rules restrict existing access. They do not provide additional access. Therefore, if a user has read-only access to a plan, the cell access rules for that plan do not affect them. Similarly, if a user doesn't have access to a plan, the cell access rules for that plan do not affect them. If you want to restrict a user's access to an entire plan, use the Salesforce sharing feature and permission sets instead of access rules.