Permissions Release Notes: Assessment Automation

This article consolidates all permissions release notes for Assessment Automation since the OneTrust 202506.1.0 release, providing a single reference point for changes that impact roles, access, and permissions. Each section below corresponds to a release version and includes permissions release notes announced for the product in the respective release. The absence of a release below indicates that there were no permissions release notes announced for the product for that release. For details on permissions release notes across the platform, see Permissions Release Notes Catalog.

Important:

Starting in the OneTrust 202601.1.0 release, permissions release notes related to this product will be exclusively published in this article. If permissions release notes exist, the following note will appear within the Permissions section for the respective product on the myOneTrust Release Notes page with a link to this article:

"Permission changes have been implemented to improve platform usability and administrative efficiency. For more information, see Permissions Release Notes: [Product Name]. For a complete list of products with permission updates in this release, see Permissions Release Notes Catalog."

September 4, 2026 - 202609.1.0

Split Permissions

The following permissions have been split for more granular and precise access controls and have been granted to system and custom roles as defined below:

Old permission name

New permission name

System roles

Custom roles

Templates create and publish

Create assessment templates

These permissions have been granted to the following system roles:

AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, Disclosures Administrator, ERM Manager, ESG Manager, Incidents Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Vendor Manager, Vendorpedia Assessment Coordinator

These permissions have been granted to custom roles that were previously assigned the Templates create and publish permission.

Publish assessment templates

Templates archive

Archive assessment templates

These permissions have been granted to the following system roles:

AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, Disclosures Administrator, ERM Manager, ESG Manager, Incidents Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Vendor Manager, Vendorpedia Assessment Coordinator

These permissions have been granted to custom roles that were previously assigned the Templates archive permission.

Restore assessment templates

Assessment score profiles

Create scoring profiles for assessment templates

These permissions have been granted to the following system roles:

AI Governance Manager, Assessments Manager, Audit Manager, Data Mapping Automation Manager, ERM Manager, IT Risk Manager, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Assessment score profiles permission.

Delete scoring profiles for assessment templates

Edit scoring profiles for assessment templates

View scoring profiles for assessment templates

Renamed Permissions

The following permissions have been renamed to improve clarity on the actions associated with each individual permission. No changes have been made to permission functionality.

Old permission name

New permission name

Templates update

Edit assessment templates

Templates delete

Delete assessment templates

Templates copy

Copy assessment templates

Templates lock

Lock assessment templates

Templates import

Import assessment templates

Templates export

Export assessment templates

Template translations

Translate assessment templates

Templates edit published

Edit assessment template versions

Templates question add

Create questions in assessment templates

Template copy question

Copy questions in assessments templates

Templates controls question filters

Edit response filters for assessment template questions

Self Service Portal config

Edit assessment template settings in Self Service Portal

PIA & DPIA Automation Settings

Edit assessment automation settings

August 7, 2026 - 202608.1.0 (Summer Release)

Split Permissions

The following permissions have been split for more granular and precise access controls and have been granted to system and custom roles as defined below:

Old permission name

New permission name

System roles

Custom roles

Assessment delete

Restore assessments

These permissions have been granted to the following system roles:

AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, Disclosures Administrator, ERM Manager, ESG Manager, Exchange Manager, Incidents Manager, IT Risk Manager, Managed Service Provider, Maturity & Planning Manager, Program Benchmarking Manager, Site Admin, Tech Risk & Compliance Admin, TPDD Admin, Vendor Manager, Vendorpedia Assessment Coordinator

These permissions have been granted to custom roles that were previously assigned the Assessment delete permission.

Bulk delete assessments

Delete Assessments

Manage all section assignment workflow

Edit assessment sections

These permissions have been granted to the following system roles:

AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, ERM Manager, ESG Manager, Exchange Manager, Incidents Manager, IT Risk Manager, Managed Service Provider, Site Admin, Tech Risk & Compliance Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Vendor Manager, Vendorpedia Assessment Coordinator

These permissions have been granted to custom roles that were previously assigned the Manage all section assignment workflow permission.

View assessment section assignments

Assessment can be approver

Act as a project approver on assessments

These permissions have been granted to the following system roles:

AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, Disclosure Approver, Disclosures Administrator, ERM Manager, ESG Manager, Exchange Manager, Incidents Manager, IT Risk Manager, Managed Service Provider, Maturity & Planning Manager, Privacy Officer, Program Benchmarking Manager, Site Admin, Tech Risk & Compliance Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Assessment can be approver permission.

Undo assessment review

Assessment close info request

Close information requests for assessments

These permissions have been granted to the following system roles:

AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, Disclosure Approver, Disclosures Administrator, ERM Manager, ESG Manager, Exchange Manager, Incidents Manager, IT Risk Manager, Managed Service Provider, Maturity & Planning Manager, Privacy Officer, Program Benchmarking Manager, Site Admin, Tech Risk & Compliance Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Vendor Manager, Vendorpedia Assessment Coordinator

These permissions have been granted to custom roles that were previously assigned the Assessment close info request permission.

Reopen assessment question information requests

Manage assessment workflows

Archive workflow templates for assessments

These permissions have been granted to the following system roles:

AI Governance Manager, Assessments Manager, Compliance Manager, Data Mapping Automation Manager, Disclosure Approver, Disclosures Administrator, ERM Manager, ESG Manager, Exchange Manager, Incidents Manager, IT Risk Manager, Managed Service Provider, Site Admin, Tech Risk & Compliance Admin, TPDD Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Manage assessment workflows permission.

Create workflow templates for assessments

Delete workflow templates for assessments

Edit workflow templates for assessments

Publish workflow templates for assessments

Restore workflow templates for assessments

Merged Permissions

The following permissions have been merged. The existing functionality is now controlled by a single permission as defined below:

Permission name

Explanation of changes

View workflow templates for assessments

The following permissions have been merged into the View workflow templates for assessments permission:

  • Manage assessment change workflows

  • Edit approval stage assignment

  • Manage assessment workflows

  • TemplatesV2

View related assessments

The Assessment view related assessments and Assessment manage related assessments permissions have been merged into the View related assessments permission.

Renamed Permissions

The following permissions have been renamed to improve clarity on the actions associated with each individual permission. No changes have been made to permission functionality.

Old permission name

New permission name

Reassess assessment

Reassess assessments

Assessment unlock

Reopen assessments

Assessment bulk import

Bulk create assessments

Approver can edit responses

Edit responses in assessment review

Manage assessment results

Edit assessment results

Assessment submit

Submit assessments

Assessment tagging

Edit assessment tags

Assessment complete task

Close assessment tasks

Manage unarchived assessments

Unarchive assessments

Edit approval stage assignment

Change approvers for assessment workflow stages

Assessment admin view

Edit public views of assessment list

View deleted assessments

View recycle bin for assessments

Assessment approve

Approve assessments

Manage archived assessments

Archive assessments

Assessment copy

Copy assessments

Assessment edit details

Edit assessments

Assessment approver reassign

Change assessment approvers

Assessment change assessment org

Change assessment organization

Assessment respondent reassign

Change assessment respondents

Assessment skip review stages

Change assessment workflow stage

Manage assessment change workflows

Change assessment workflow

February 20, 2026 - 202602.1.0 (Winter Release)

New Permissions

The following permissions have been added to the platform and have been granted to system and custom roles as defined below:

Permission name

Explanation of change

System roles

Custom roles

AI assessment auto-responses

The AI assessment auto-responses permission has been added to give users the ability to enable the auto-answering of assessment questions.

This permission has been granted to the following system roles:

AI Governance manager, Answer library manager, Assessments manager, Audit manager, Business owner, Compliance manager, Data Mapping Automation manager, ERM manager, ESG manager, Exchange manager, Incidents manager, Invited user, IT Risk manager, Maturity & Planning Manager, Privacy officer, Program Benchmarking manager, Project owner, Project respondent, Project viewer, Question manager, Site admin, Tech Risk & Compliance Admin, TPDD admin, TPDD compliance manager, TPDD enhanced due diligence requester, Vendor manager, Vendorpedia assessment coordinator

This permission has not been granted to custom roles by default but can be configured.

AI assessment auto-response setting

The AI assessment auto-response setting permission has been added to give users the ability to enable the AI Auto-Responses Feature Set.

This permission has been granted to the Site admin system role.

This permission has not been granted to custom roles by default but can be configured.

January 30, 2026 - 202601.2.0

Assessments – Invited User Security Enhancements

OneTrust is implementing new permission controls for Invited Users and Project Respondents to align front-end access controls with back-end API behaviors. This update ensures that low-privilege users cannot access metadata or assessment content outside their assigned scope. A new permission will be available for customers who need to restore the broader access level previously granted to their Invited Users.

No action is required unless you want Invited Users to retain their previous access. If you want Invited Users to retain their previous access, you can assign the newly introduced Advanced assessment metadata permission manually to a custom copy of the Invited User role after the change goes live in OneTrust 202601.2.0. Those users with the Invited User role will then need to be reassigned to the custom invited user role with the new permission.

For more information, see Assessments – Invited User Security Enhancements, Invited Users FAQ, and Project Respondents FAQ. For a complete list of products with permission updates in this release, see Permissions Release Notes Catalog.