Permissions Release Notes: Assessment Automation
This article consolidates all permissions release notes for Assessment Automation since the OneTrust 202506.1.0 release, providing a single reference point for changes that impact roles, access, and permissions. Each section below corresponds to a release version and includes permissions release notes announced for the product in the respective release. The absence of a release below indicates that there were no permissions release notes announced for the product for that release. For details on permissions release notes across the platform, see Permissions Release Notes Catalog.
Starting in the OneTrust 202601.1.0 release, permissions release notes related to this product will be exclusively published in this article. If permissions release notes exist, the following note will appear within the Permissions section for the respective product on the myOneTrust Release Notes page with a link to this article:
"Permission changes have been implemented to improve platform usability and administrative efficiency. For more information, see Permissions Release Notes: [Product Name]. For a complete list of products with permission updates in this release, see Permissions Release Notes Catalog."
September 4, 2026 - 202609.1.0
- Split Permissions
-
The following permissions have been split for more granular and precise access controls and have been granted to system and custom roles as defined below:
Old permission name
New permission name
System roles
Custom roles
Templates create and publish
Create assessment templates
These permissions have been granted to the following system roles:
AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, Disclosures Administrator, ERM Manager, ESG Manager, Incidents Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Vendor Manager, Vendorpedia Assessment Coordinator
These permissions have been granted to custom roles that were previously assigned the Templates create and publish permission.
Publish assessment templates
Templates archive
Archive assessment templates
These permissions have been granted to the following system roles:
AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, Disclosures Administrator, ERM Manager, ESG Manager, Incidents Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Vendor Manager, Vendorpedia Assessment Coordinator
These permissions have been granted to custom roles that were previously assigned the Templates archive permission.
Restore assessment templates
Assessment score profiles
Create scoring profiles for assessment templates
These permissions have been granted to the following system roles:
AI Governance Manager, Assessments Manager, Audit Manager, Data Mapping Automation Manager, ERM Manager, IT Risk Manager, Site Admin, Tech Risk & Compliance Admin, Vendor Manager
These permissions have been granted to custom roles that were previously assigned the Assessment score profiles permission.
Delete scoring profiles for assessment templates
Edit scoring profiles for assessment templates
View scoring profiles for assessment templates
- Renamed Permissions
-
The following permissions have been renamed to improve clarity on the actions associated with each individual permission. No changes have been made to permission functionality.
Old permission name
New permission name
Templates update
Edit assessment templates
Templates delete
Delete assessment templates
Templates copy
Copy assessment templates
Templates lock
Lock assessment templates
Templates import
Import assessment templates
Templates export
Export assessment templates
Template translations
Translate assessment templates
Templates edit published
Edit assessment template versions
Templates question add
Create questions in assessment templates
Template copy question
Copy questions in assessments templates
Templates controls question filters
Edit response filters for assessment template questions
Self Service Portal config
Edit assessment template settings in Self Service Portal
PIA & DPIA Automation Settings
Edit assessment automation settings
August 7, 2026 - 202608.1.0 (Summer Release)
- Split Permissions
-
The following permissions have been split for more granular and precise access controls and have been granted to system and custom roles as defined below:
Old permission name
New permission name
System roles
Custom roles
Assessment delete
Restore assessments
These permissions have been granted to the following system roles:
AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, Disclosures Administrator, ERM Manager, ESG Manager, Exchange Manager, Incidents Manager, IT Risk Manager, Managed Service Provider, Maturity & Planning Manager, Program Benchmarking Manager, Site Admin, Tech Risk & Compliance Admin, TPDD Admin, Vendor Manager, Vendorpedia Assessment Coordinator
These permissions have been granted to custom roles that were previously assigned the Assessment delete permission.
Bulk delete assessments
Delete Assessments
Manage all section assignment workflow
Edit assessment sections
These permissions have been granted to the following system roles:
AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, ERM Manager, ESG Manager, Exchange Manager, Incidents Manager, IT Risk Manager, Managed Service Provider, Site Admin, Tech Risk & Compliance Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Vendor Manager, Vendorpedia Assessment Coordinator
These permissions have been granted to custom roles that were previously assigned the Manage all section assignment workflow permission.
View assessment section assignments
Assessment can be approver
Act as a project approver on assessments
These permissions have been granted to the following system roles:
AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, Disclosure Approver, Disclosures Administrator, ERM Manager, ESG Manager, Exchange Manager, Incidents Manager, IT Risk Manager, Managed Service Provider, Maturity & Planning Manager, Privacy Officer, Program Benchmarking Manager, Site Admin, Tech Risk & Compliance Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Vendor Manager
These permissions have been granted to custom roles that were previously assigned the Assessment can be approver permission.
Undo assessment review
Assessment close info request
Close information requests for assessments
These permissions have been granted to the following system roles:
AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, Disclosure Approver, Disclosures Administrator, ERM Manager, ESG Manager, Exchange Manager, Incidents Manager, IT Risk Manager, Managed Service Provider, Maturity & Planning Manager, Privacy Officer, Program Benchmarking Manager, Site Admin, Tech Risk & Compliance Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Vendor Manager, Vendorpedia Assessment Coordinator
These permissions have been granted to custom roles that were previously assigned the Assessment close info request permission.
Reopen assessment question information requests
Manage assessment workflows
Archive workflow templates for assessments
These permissions have been granted to the following system roles:
AI Governance Manager, Assessments Manager, Compliance Manager, Data Mapping Automation Manager, Disclosure Approver, Disclosures Administrator, ERM Manager, ESG Manager, Exchange Manager, Incidents Manager, IT Risk Manager, Managed Service Provider, Site Admin, Tech Risk & Compliance Admin, TPDD Admin, Vendor Manager
These permissions have been granted to custom roles that were previously assigned the Manage assessment workflows permission.
Create workflow templates for assessments
Delete workflow templates for assessments
Edit workflow templates for assessments
Publish workflow templates for assessments
Restore workflow templates for assessments
- Merged Permissions
-
The following permissions have been merged. The existing functionality is now controlled by a single permission as defined below:
Permission name
Explanation of changes
View workflow templates for assessments
The following permissions have been merged into the View workflow templates for assessments permission:
-
Manage assessment change workflows
-
Edit approval stage assignment
-
Manage assessment workflows
-
TemplatesV2
View related assessments
The Assessment view related assessments and Assessment manage related assessments permissions have been merged into the View related assessments permission.
-
- Renamed Permissions
-
The following permissions have been renamed to improve clarity on the actions associated with each individual permission. No changes have been made to permission functionality.
Old permission name
New permission name
Reassess assessment
Reassess assessments
Assessment unlock
Reopen assessments
Assessment bulk import
Bulk create assessments
Approver can edit responses
Edit responses in assessment review
Manage assessment results
Edit assessment results
Assessment submit
Submit assessments
Assessment tagging
Edit assessment tags
Assessment complete task
Close assessment tasks
Manage unarchived assessments
Unarchive assessments
Edit approval stage assignment
Change approvers for assessment workflow stages
Assessment admin view
Edit public views of assessment list
View deleted assessments
View recycle bin for assessments
Assessment approve
Approve assessments
Manage archived assessments
Archive assessments
Assessment copy
Copy assessments
Assessment edit details
Edit assessments
Assessment approver reassign
Change assessment approvers
Assessment change assessment org
Change assessment organization
Assessment respondent reassign
Change assessment respondents
Assessment skip review stages
Change assessment workflow stage
Manage assessment change workflows
Change assessment workflow
February 20, 2026 - 202602.1.0 (Winter Release)
- New Permissions
-
The following permissions have been added to the platform and have been granted to system and custom roles as defined below:
Permission name
Explanation of change
System roles
Custom roles
AI assessment auto-responses
The AI assessment auto-responses permission has been added to give users the ability to enable the auto-answering of assessment questions.
This permission has been granted to the following system roles:
AI Governance manager, Answer library manager, Assessments manager, Audit manager, Business owner, Compliance manager, Data Mapping Automation manager, ERM manager, ESG manager, Exchange manager, Incidents manager, Invited user, IT Risk manager, Maturity & Planning Manager, Privacy officer, Program Benchmarking manager, Project owner, Project respondent, Project viewer, Question manager, Site admin, Tech Risk & Compliance Admin, TPDD admin, TPDD compliance manager, TPDD enhanced due diligence requester, Vendor manager, Vendorpedia assessment coordinator
This permission has not been granted to custom roles by default but can be configured.
AI assessment auto-response setting
The AI assessment auto-response setting permission has been added to give users the ability to enable the AI Auto-Responses Feature Set.
This permission has been granted to the Site admin system role.
This permission has not been granted to custom roles by default but can be configured.
January 30, 2026 - 202601.2.0
- Assessments – Invited User Security Enhancements
-
OneTrust is implementing new permission controls for Invited Users and Project Respondents to align front-end access controls with back-end API behaviors. This update ensures that low-privilege users cannot access metadata or assessment content outside their assigned scope. A new permission will be available for customers who need to restore the broader access level previously granted to their Invited Users.
No action is required unless you want Invited Users to retain their previous access. If you want Invited Users to retain their previous access, you can assign the newly introduced Advanced assessment metadata permission manually to a custom copy of the Invited User role after the change goes live in OneTrust 202601.2.0. Those users with the Invited User role will then need to be reassigned to the custom invited user role with the new permission.
For more information, see Assessments – Invited User Security Enhancements, Invited Users FAQ, and Project Respondents FAQ. For a complete list of products with permission updates in this release, see Permissions Release Notes Catalog.