Permissions Release Notes: Compliance Automation
This article consolidates all permissions release notes for Compliance Automation since the OneTrust 202506.1.0 release, providing a single reference point for changes that impact roles, access, and permissions. Each section below corresponds to a release version and includes permissions release notes announced for the product in the respective release. The absence of a release below indicates that there were no permissions release notes announced for the product for that release. For details on permissions release notes across the platform, see Permissions Release Notes Catalog.
Starting in the OneTrust 202601.1.0 release, permissions release notes related to this product will be exclusively published in this article. If permissions release notes exist, the following note will appear within the Permissions section for the respective product on the myOneTrust Release Notes page with a link to this article:
"Permission changes have been implemented to improve platform usability and administrative efficiency. For more information, see Permissions Release Notes: [Product Name]. For a complete list of products with permission updates in this release, see Permissions Release Notes Catalog."
August 7, 2026 - 202608.1.0 (Summer Release)
- Renamed Permissions
-
The following permissions have been renamed to improve clarity on the actions associated with each individual permission. No changes have been made to permission functionality.
Old permission name
New permission name
Edit control evidence task
Edit evidence tasks
View evidence task email template
View evidence task email templates
July 17, 2026 - 202607.1.0
- New Permissions
-
The following permissions have been added to the platform and have been granted to system and custom roles as defined below:
Permission name
Explanation of changes
System roles
Custom roles
View initiative issues
The View initiative issues permission has been added and now controls users’ ability to view issues in compliance initiatives.
This permission has been granted to the following system roles:
AI Governance Manager, Compliance Manager, ERM Manager, Enterprise Policy Manager, IT Risk Approver, IT Risk Manager, Policy Owner, Project Owner, Site Admin, Tech Risk & Compliance Admin, Vendor Manager
This permission has been granted to custom roles that were previously assigned the View issue related objects, Unlink from issues, or Link to issues permissions.
Create initiative issues
The Create initiative issues permission has been added and now controls users’ ability to create issues for compliance initiatives.
This permission has been granted to the following system roles:
AI Governance Manager, Compliance Manager, ERM Manager, Enterprise Policy Manager, IT Risk Approver, IT Risk Manager, Policy Owner, Site Admin, Tech Risk & Compliance Admin, Vendor Manager
This permission has been granted to custom roles that were previously assigned the Create issues permission.
Link initiative issues
The Link initiative issues permission has been added and now controls users’ ability to link issues for compliance initiatives.
This permission has been granted to the following system roles:
AI Governance Manager, Compliance Manager, ERM Manager, Enterprise Policy Manager, IT Risk Approver, IT Risk Manager, Policy Owner, Site Admin, Tech Risk & Compliance Admin, Vendor Manager
This permission has been granted to custom roles that were previously assigned the Unlink from issues or Link to issues permissions.
- Split Permissions
-
The following permissions have been split for more granular and precise access controls and have been granted to system and custom roles as defined below:
Old permission name
New permission name
System roles
Custom
View initiatives
View initiatives
These permissions have been granted to the following system roles:
Compliance Manager, Site Admin, Tech Risk & Compliance Manager
These permissions have been granted to custom roles that were previously assigned the View initiatives permission.
View initiative controls
View initiative vendors
View initiative assets
View initiative entities
View initiative processing activities
- Merged Permissions
-
The following permissions have been merged. The existing functionality is now controlled by a single permission as defined below:
Permission name
Explanation of changes
Create initiative controls
The Create asset controls, Create entity controls, Create processing activity controls, and Create vendor controls permissions were merged into the Create initiative controls permission.
Unlink initiative controls
The Unlink assets from controls, Unlink entities from controls, Unlink processing activities from controls, and Unlink vendors from controls permissions were merged into the Unlink initiative controls permission.
- Renamed Permissions
-
The following permissions have been renamed to improve clarity on the actions associated with each individual permission. No changes have been made to permission functionality.
Old permission name
New permission
Add initiative
Create initiatives
View initiative evidence task tab
View initiative evidence tasks
June 26, 2026 - 202606.2.0
- New Permissions
-
The following permissions have been added to the platform and have been granted to system and custom roles as defined below:
Permission name
Explanation of changes
System roles
Custom roles
View evidence task activity
The View evidence task activity permission has been added and now controls users’ ability to view activity in evidence tasks.
This permission has been granted to the following system roles:
AI Governance Manager, Assessments Manager, Audit Manager, Compliance Manager, Data Mapping Automation Manager, EPM Policy View Only, EPM Procedure View Only, EPM Standard View Only, EPM View Only, ERM Manager, ESG Manager, Enterprise Policy Manager, Exchange Manager, IT Risk Approver, IT Risk Manager, Incidents Manager, Invited, Policy Owner, Privacy Notice Author, Privacy Notice Manager, Privacy Officer, Project Owner, Project Respondent, Site Admin, Tech Risk & Compliance Admin, Vendor Manager
This permission has been granted to custom roles that were previously assigned the View details of a given control implementation permission.
View evidence task controls
The View evidence task controls permission has been added and now controls users’ ability to view controls in evidence tasks.
This permission has been granted to the following system roles:
AI Governance Manager, Assessments Manager, Audit Manager, Auditor, Compliance Manager, Data Governance Manager, Data Mapping Automation Manager, EPM Policy View Only, EPM Procedure View Only, EPM Standard View Only, EPM View Only, ERM Manager, ESG Manager, Enterprise Policy Manager, Exchange Manager, IT Risk Manager, Incidents Manager, Policy Owner, Privacy Notice Author, Privacy Notice Manager, Privacy Officer, Project Owner, Site Admin, Tech Risk & Compliance Admin, Vendor Manager
This permission has been granted to custom roles that were previously assigned the Control owner view permission.
Edit evidence task interval workflow stage
The Edit evidence task interval workflow stage permission has been added and now controls users’ ability to edit the workflow stage of the evidence task interval.
This permission has been granted to the following system roles:
AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, ERM Manager, ESG Manager, Exchange Manager, IT Risk Approver, IT Risk Manager, Incidents Manager, Privacy Officer, Site Admin, Tech Risk &Compliance Admin, Vendor Manager
This permission has been granted to custom roles that were previously assigned the Edit control evidence task permission.
Export evidence task reports
The Export evidence task reports permission has been added and now controls users’ ability to export evidence task reports as XLSX.
This permission has been granted to the following system roles:
AI Governance Manager, Assessments Manager, Audit Manager, Auditor, Compliance Manager, Data Mapping Automation Manager, EPM Policy View Only, EPM Procedure View Only, EPM Standard View Only, EPM View Only, ERM Manager, ESG Manager, Enterprise Policy Manager, Exchange Manager, IT Risk Manager, Incidents Manager, Policy Owner, Privacy Notice Author, Privacy Notice Manager, Privacy Officer, Project Owner, Site Admin, Tech Risk & Compliance Admin, Vendor Manager
This permission has been granted to custom roles that were previously assigned the View control reports permission.
Edit a evidence public view
The Edit a evidence public view permission has been added and now controls users’ ability to create, edit, and share public views of the evidence list.
This permission has been granted to the following system roles:
AI Governance Manager, Assessments Manager, Audit Manager, Compliance Manager, Data Governance Manager, Data Mapping Automation Manager, ESG Manager, IT Risk Manager, Incidents Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager
This permission has been granted to custom roles that were previously assigned the Edit evidence task library public views permission.
Create attachment analyses for evidence task intervals
The Create attachment analyses for evidence task intervals permission has been added and now controls users’ ability to create analysis on attachments in evidence task intervals.
This permission has been granted to the following system roles:
Compliance Manager, IT Risk Approver, IT Risk Manager, Site Admin, Tech Risk & Compliance Admin
This permission has been granted to custom roles that were previously assigned the Run evidence task AI evidence analysis permission.
View attachment analyses for evidence task intervals
The View attachment analyses for evidence task intervals permission has been added and now controls users’ ability to view analysis on attachments in evidence task intervals.
This permission has been granted to the following system roles:
Compliance Manager, IT Risk Approver, IT Risk Manager, Invited, Site Admin, Tech Risk & Compliance Admin
This permission has been granted to custom roles that were previously assigned the View evidence task AI evidence analysis results permission.
- Split Permissions
-
The following permissions have been split for more granular and precise access controls and have been granted to system and custom roles as defined below:
Old permission name
New permission name
System roles
Custom roles
Update associated controls
Link evidence task controls
These permissions have been granted to the following system roles:
AI Governance Manager, Assessments Manager, Compliance Manager, Data Governance Manager, Data Mapping Automation Manager, ESG Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager
These permissions have been granted to custom roles that were previously assigned the Update associated controls permission.
Unlink evidence task controls
View entity control implementations
View interval attachments for evidence tasks
This permission has been granted to the following system roles:
AI Governance Manager, Assessments Manager, Audit Manager, Auditor, Compliance Manager, Data Governance Manager, Data Mapping Automation Manager, EPM Policy View Only, EPM Procedure View Only, EPM Standard View Only, EPM View Only, ERM Manager, ESG Manager, Enterprise Policy Manager, Exchange Manager, IT Risk Approver, IT Risk Manager, Incidents Manager, Invited, Managed Service Provider, Policy Owner, Privacy Notice Author, Privacy Notice Manager, Privacy Officer, Project Owner, Project Respondent, Project Viewer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager
These permissions have been granted to custom roles that were previously assigned the View entity control implementations permission.
View evidence task interval workflow
This permission has been granted to the following system roles:
AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, ERM Manager, ESG Manager, Exchange Manager, IT Risk Approver, IT Risk Manager, Incidents Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager
View evidence task intervals
These permissions have been granted to the following system roles:
AI Governance Manager, Assessments Manager, Audit Manager, Auditor, Compliance Manager, Data Mapping Automation Manager, EPM Policy View Only, EPM Procedure View Only, EPM Standard View Only, EPM View Only, ERM Manager, ESG Manager, Enterprise Policy Manager, Exchange Manager, IT Risk Approver, IT Risk Manager, Incidents Manager, Invited, Managed Service Provider, Policy Owner, Privacy Notice Author, Privacy Notice Manager, Privacy Officer, Project Owner, Project Respondent, Project Viewer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager
View evidence task related objects
View evidence tasks
View control evidence tasks
View control inventories
View control policies
View control related objects
View control risks
Control saved view
Edit saved views of evidence tasks
These permissions have been granted to the following system roles:
AI Governance Manager, Assessments Manager, Audit Manager, Auditor, Business Owner, Compliance Manager, Data Governance Manager, Data Mapping Automation Manager, ERM Manager, ESG Manager, Exchange Manager, IT Risk Approver, IT Risk Manager, Incidents Manager, Invited, Privacy Officer, Project Owner, Site Admin, Tech Risk & Compliance Admin, Vendor Manager
These permissions have been granted to custom roles that were previously assigned the Control saved views permission.
Edit control saved views
Create control saved views
Delete control saved views
View control saved views
Edit a control public view
- Renamed Permissions
-
The following permissions have been renamed to improve clarity on the actions associated with each individual permission. No changes have been made to permission functionality.
Old permission name
New permission name
View control attributes
View control attribute setup
Edit control attributes
Edit control attribute setup
Add Control Attributes
Create control attributes
View control reports
Export control list
Controls library bulk update
Bulk edit control templates
Edit evidence task library public views
Edit a evidence public view
Add document to evidence task interval
Create interval attachments for evidence tasks
Delete document from evidence task interval
Delete interval attachments for evidence tasks
Evidence task zip export
Export interval attachments for evidence tasks
Evidence task due date
Edit interval due date for evidence tasks
Edit evidence task public views
Edit public saved views of evidence tasks
- Removed Permissions
-
The following permissions have been removed from the platform or removed from select system roles as defined below:
Permission name
Explanation of change
Run evidence task AI evidence analysis
The Run evidence task AI evidence analysis permission has been removed from the platform.
View evidence task AI evidence analysis results
The View evidence task AI evidence analysis results permission has been removed from the platform.
May 15, 2026 - 202605.1.0 (Spring Release)
-
For users with access toCompliance Automation, theProcessing activities,Assets,Vendors, andEntitiesitems on the navigation menu will now be visible to these users by default regardless of whether they have permission to view those inventories. However, users will not be able to view inventory information on those respective screens without the necessary permissions.
- New Permissions
-
The following permissions have been added to the platform and have been granted to system and custom roles as defined below:
Permission name
Explanation of changes
System roles
Custom roles
View EvidenceTask Interval Workflow Setup
The View EvidenceTask Interval Workflow Setup permission has been added to give users the ability to view evidence task interval workflows when configuring workflows.
This permission has been granted to the following system roles:
AI Governance Manager, Assessments Manager, Audit Manager, Compliance Manager, Data Governance Manager, Data Mapping Automation Manager, ERM Manager, ESG Manager, Enterprise Policy Manager, Exchange Manager, Incidents Manager, IT Risk Manager, Policy Owner, Privacy Notice Author, Privacy Notice Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager
This permission has not been granted to custom roles by default but can be configured.
View evidence task interval workflow
The View evidence task interval workflow permission has been added to give users the ability to view workflows on evidence task intervals.
This permission has been granted to the following system roles:
AI Governance Manager, Assessments Manager, Audit Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, ERM Manager, ESG Manager, Enterprise Policy Manager, Exchange Manager, Incidents Manager, Invited, IT Risk Approver, IT Risk Manager, Policy Owner, Privacy Notice Author, Privacy Notice Manager, Privacy Officer, Privacy Program Auditor, Project Owner, Project Respondent, Site Admin, Tech Risk & Compliance Admin, Vendor Manager, Vendorpedia Assessment Coordinator
This permission has not been granted to custom roles by default but can be configured.
Edit evidence task interval workflow stage
The Edit evidence task interval workflow stage permission has been added to give users the ability to edit workflow stages of evidence task intervals.
This permission has been granted to the following system roles:
AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, ERM Manager, ESG Manager, Exchange Manager, Incidents Manager, IT Risk Approver, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager
This permission has been granted to custom roles that were previously assigned the Edit control evidence task permission.
April 25, 2026 - 202604.2.0
- New Permissions
-
The following permissions have been added to the platform and have been granted to system and custom roles as defined below:
Permission name
Explanation of changes
System roles
Custom roles
Evidence Task Interval Change Workflow
The Evidence Task Interval Change Workflow permission has been added to give users the ability to change workflows for a specific evidence task interval.
This permission has been granted to the following system roles:
Compliance Manager, IT Risk Manager, Project Owner, Site Admin, Tech Risk & Compliance Admin
This permission has not been granted to custom roles by default but can be configured.
Evidence Task Approval Bypass
The Evidence Task Approval Bypass permission has been added to give users the ability to bypass the approval stage and move an evidence task interval to the next stage.
This permission has been granted to the following system roles:
Compliance Manager, IT Risk Manager, Site Admin, Tech Risk & Compliance Admin
This permission has not been granted to custom roles by default but can be configured.
March 13, 2026 - 202603.1.0
- New Permissions
-
The following permissions have been added to the platform and have been granted to system and custom roles as defined below:
Permission name
Explanation of changes
System roles
Custom roles
View evidence task AI evidence analysis results
The View evidence task AI evidence analysis results permission has been added to give users the ability to view AI-generated recommendations and validation results for controls, evidence tasks, and risks.
This permission has been granted to the following system roles:
Compliance Manager, Invited User, IT Risk Approver, IT Risk Manager, Site Admin, Tech Risk & Compliance Admin
This permission has not been granted to custom roles by default but can be configured.
Run evidence task AI evidence analysis
The Run evidence task AI evidence analysis permission has been added to give users the ability to run AI evidence analysis on evidence tasks to generate recommendations and validation results for controls, evidence tasks, and risks.
This permission has been granted to the following system roles:
Compliance Manager, Invited User, IT Risk Approver, IT Risk Manager, Site Admin, Tech Risk & Compliance Admin
This permission has not been granted to custom roles by default but can be configured.
January 30, 2026 - 202601.2.0
- New Permissions
-
The following permissions have been added to the platform and have been granted to system and custom roles as defined below:
Permission name
Explanation of changes
System roles
Custom roles
Bulk edit evidence tasks
The Bulk edit evidence tasks permission has been added to give users the ability to edit evidence task records in bulk.
This permission has been granted to the following system roles:
AI Governance manager, Assessments manager, Audit manager, Compliance manager, Data Mapping Automation manager, ERM manager, IT risk manager, Privacy officer, Site admin, Tech Risk & Compliance admin
This permission has not been granted to custom roles by default but can be configured.
December 5, 2025 - 202512.1.0
- New Permissions
-
The following permissions have been added to the platform and have been granted to system and custom roles as defined below:
Permission name
Explanation of changes
System roles
Custom roles
Create collection calender saved views
The Create collection calender saved views permission has been added to give users the ability to create saved views for the evidence collection calendar.
This permission has been granted to the following system roles:
Compliance Manager, Site Admin, Tech Risk & Compliance Admin
This permission has been granted to custom roles that were previously assigned the Create Initiative saved views permission.
Edit collection calender saved views
The Edit collection calender saved views permission has been added to give users the ability to edit saved views for the evidence collection calendar.
This permission has been granted to the following system roles:
Compliance Manager, Site Admin, Tech Risk & Compliance Admin
This permission has been granted to custom roles that were previously assigned the Edit Initiative saved views permission.
Delete collection calender saved views
The Delete collection calender saved views permission has been added to give users the ability to delete saved views for the evidence collection calendar.
This permission has been granted to the following system roles:
Compliance Manager, Site Admin, Tech Risk & Compliance Admin
This permission has been granted to custom roles that were previously assigned the Delete Initiative saved views permission.
View collection calender saved views
The View collection calender saved views permission has been added to give users the ability to view saved views for the evidence collection calendar.
This permission has been granted to the following system roles:
Compliance Manager, Site Admin, Tech Risk & Compliance Admin
This permission has been granted to custom roles that were previously assigned the View Initiative saved views permission.
October 27, 2025 - 202510.2.0 (Fall Release)
- New Permissions
-
The following permissions have been added to the platform and have been granted to system and custom roles as defined below:
Permission name
Explanation of changes
System roles
Custom roles
Hub Content Update
The Hub Content Update permission has been added to give users the ability to view control framework content updates.
This permission has been granted to the following system roles:
Compliance Manager, IT Risk Manager, Site Admin, Tech Risk & Compliance Admin
This permission has not been granted to custom roles by default but can be configured.
Content Update View
The Content Update View permission has been added to give users the ability to update control framework content updates.
This permission has been granted to the following system roles:
Compliance Manager, IT Risk Manager, Site Admin, Tech Risk & Compliance Admin
This permission has not been granted to custom roles by default but can be configured.
Accept Content Update
The Accept Content Update permission has been added to give users the ability to accept control framework content updates.
This permission has been granted to the following system roles:
Compliance Manager, IT Risk Manager, Site Admin, Tech Risk & Compliance Admin
This permission has not been granted to custom roles by default but can be configured.
October 3, 2025 - 202510.1.0
- New Permissions
-
The following permissions have been added to the platform and have been granted to system and custom roles as defined below:
Permission name
Explanation of changes
System roles
Custom roles
Create Initiative saved views
The Create Initiative saved views permission has been added to give users the ability to create saved views for initiatives.
This permission has been granted to Compliance Manager and Site Admin system roles.
This permission has not been granted to custom roles by default but can be configured.
Edit Initiative saved views
The Edit Initiative saved views permission has been added to give users the ability to edit saved views for initiatives.
This permission has been granted to Compliance Manager and Site Admin system roles.
This permission has not been granted to custom roles by default but can be configured.
Delete Initiative saved views
The Delete Initiative saved views permission has been added to give users the ability to delete saved views for initiatives.
This permission has been granted to Compliance Manager and Site Admin system roles.
This permission has not been granted to custom roles by default but can be configured.
View Initiative saved views
The View Initiative saved views permission has been added to give users the ability to view saved views for initiatives.
This permission has been granted to Compliance Manager and Site Admin system roles.
This permission has not been granted to custom roles by default but can be configured.
September 12, 2025 - 202509.1.0
-
As part of permission standardization efforts, some permissions have been updated. Because of this, some custom roles may no longer be able to view vendor records or other inventory items. This change is expected. Please review your custom roles and enable the permissions below as necessary to restore access:
-
Assets: Data Mapping Automation inventory assets
-
Processing Activities: Data Mapping Automation inventory processing activity
-
Entities: Data Mapping Automation entities inventory
-
Vendors: Vendor Basic Fields View & Vendor Advanced Fields View
-
Attributes: Inventory view attributes
-
July 11, 2025 - 202507.1.0
- New Permissions
-
The following permissions have been added to the platform and have been granted to system and custom roles as defined below:
Permission name
Explanation of changes
System roles
Custom roles
Edit Evidence Task Interval Start Month
The Edit Evidence Task Interval Start Month permission has been added to give users the ability to edit the evidence interval start month in Global Settings.
This permission has been granted to Compliance Manager and Site Admin system roles.
This permission has not been granted to custom roles by default but can be configured.
View Issues Tab
The View Issues Tab permission has been added to give users the ability to view the Issues tab within an initiative.
This permission has been granted to Compliance Manager and Site Admin system roles.
This permission has been granted to custom roles that were previously assigned the Edit Initiative permission.