Permissions Release Notes: Data Mapping Automation (Spring '26)

Important:

This article contains historical Data Mapping Automation permissions release notes from the Spring '26 season. For permissions release notes starting from the Summer '26 season onward, click here.

This article consolidates all permissions release notes for Data Mapping Automation from the OneTrust 202603.1.0 release through the OneTrust 202605.1.0 release, providing a single reference point for changes that impact roles, access, and permissions. Each section below corresponds to a release version and includes permissions release notes announced for the product in the respective release. The absence of a release below indicates that there were no permissions release notes announced for the product for that release. For details on permissions release notes across the platform, see Permissions Release Notes Catalog.

Important:

Starting in the OneTrust 202601.1.0 release, permissions release notes related to this product will be exclusively published in this article. If permissions release notes exist, the following note will appear within the Permissions section for the respective product on the myOneTrust Release Notes page with a link to this article:

"Permission changes have been implemented to improve platform usability and administrative efficiency. For more information, see Permissions Release Notes: [Product Name]. For a complete list of products with permission updates in this release, see Permissions Release Notes Catalog."

May 15, 2026 - 202605.1.0 (Spring Release)

TheProcessing activities,Assets,Vendors/Third parties, andEntitiesitems on the navigation menu will now be visible to users with access to the following products by default regardless of whether they have permission to view those inventories. However, users will not be able to view inventory information on those respective screens without the necessary permissions.

  • Compliance Automation

  • IT Risk Management

  • Third-Party Due Diligence (Third parties only)

  • Third-Party Risk Exchange (Third parties only)

  • Third-Party Risk Management

Split Permissions

The following permissions have been split for more granular and precise access controls and have been granted to system and custom roles as defined below:

Old permission name

New permission name

System roles

Custom roles

Manage vendor workflows

Create vendor workflows

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Project Owner, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Manage vendor workflows permission.

View setup for vendor workflows

Edit vendor workflows

Publish vendor workflows

Vendor workflow automate stage progression

Edit rules for vendor workflows

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Project Owner, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Vendor workflow automate stage progression permission.

View rules for vendor workflows

Delete rules for vendor workflows
Renamed Permissions

The following permissions have been renamed to improve clarity on the actions associated with each individual permission. No changes have been made to permission functionality.

Old permission name

New permission name

View current workflow on vendors details page

View vendor workflows

Change vendor workflows

Change vendor workflow

Advance the workflow stage of a vendor

Change vendor workflow stage

VRM delete workflows

Delete vendor workflows

April 25, 2026 - 202604.2.0

Split Permissions

The following permissions have been split for more granular and precise access controls and have been granted to system and custom roles as defined below:

Old permission name

New permission name

System roles

Custom roles

View assets

View basic fields for assets

These permissions have been granted to the following system roles:

AI Governance Manager, Audit Manager, Compliance Manager, Data Mapping Automation Manager, Digital Policy Manager, Digital Policy Owner, Enterprise Policy Manager, Ethics Policy Manager, Ethics Policy Owner, Ethics Policy Restricted Owner, IT Risk Manager, Incident General User, Policy Owner, Privacy Notice Author, Privacy Notice Manager, Privacy Officer, Privacy Program Auditor, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the View assets permissions.

View advanced fields for assets

View entities

View basic fields for entities

These permissions have been granted to the following system roles:

AI Governance Manager, Audit Manager, Compliance Manager, Data Mapping Automation Manager, Digital Policy Manager, Digital Policy Owner, ERM Manager, Enterprise Policy Manager, Ethics Policy Manager, Ethics Policy Owner, Ethics Policy Restricted Owner, IT Risk Manager, Incident General User, Policy Owner, Privacy Notice Author, Privacy Notice Manager, Privacy Officer, Privacy Program Auditor, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the View entities permission.

View advanced fields for entities

View processing activities

View basic fields for processing activities

These permissions have been granted to the following system roles:

AI Governance Manager, Audit Manager, Compliance Manager, Data Mapping Automation Manager, Digital Policy Manager, Digital Policy Owner, Enterprise Policy Manager, Ethics Policy Manager, Ethics Policy Owner, Ethics Policy Restricted Owner, IT Risk Manager, Incident General User, Policy Owner, Privacy Notice Author, Privacy Notice Manager, Privacy Officer, Privacy Program Auditor, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the View processing activities permission.

View advanced fields for processing activities
Linked Permissions

The following permissions have been linked and will be automatically added or removed from the custom rule during configuration as defined below. For more information, see Understanding Linked Permissions.

Permission name

Explanation of changes

View advanced fields for assets

  • When the View advanced fields for assets permission is added to the custom role, the View basic fields for assets permission will be automatically added.

View advanced fields for entities

  • When the View advanced fields for entities permission is added to the custom role, the View basic fields for entities permission will be automatically added.

View advanced fields for processing activities

  • When the View advanced fields for processing activities permission is added to the custom role, the View basic fields for processing activities permission will be automatically added.

View advanced fields for vendors

  • When the View advanced fields for vendors permission is added to the custom role, the View basic fields for vendors permission will be automatically added.
Unlinked Permissions

The following permissions have been unlinked and will no longer be added or removed automatically from the custom role during configuration as defined below.

Permission name

Explanation of changes

Inventory view attributes

When any of the permissions listed below are added to the custom role, the Inventory view attributes permission will no longer be automatically added. Each permission below is now standalone and must be explicitly added to the custom role.

  • View asset attributes

  • View activity of asset attributes

  • View entity attributes

  • View activity of entity attributes

  • View vendor attributes

  • View activity of vendor attributes

  • View processing activity attributes

  • View activity of processing activity attributes
Renamed Permissions

The following permissions have been renamed to improve clarity on the actions associated with each individual permission. No changes have been made to permission functionality.

Old permission name

New permission name

Vendor basic fields view

View basic fields for vendors

Vendor advanced fields view

View advanced fields for vendors

April 2, 2026 - 202604.1.0

For users with access toData Mapping Automation, theProcessing activities,Assets,Vendors, andEntitiesitems on the navigation menu will now be visible to these users by default regardless of whether they have permission to view those inventories. However, users will not be able to view inventory information on those respective screens without the necessary permissions.

Split Permissions

The following permissions have been split for more granular and precise access controls and have been granted to system and custom roles as defined below:

Old permission name

New permission name

System roles

Custom roles

VRM certificates

View certificates for assets

These permissions have been granted to the following system roles:

IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the VRM certificates permission.

View vendor certificates

Inventory add attributes

Create asset attributes

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, ERM Manager, IT Risk Manager, Privacy Officer, Site Admin, TPDD Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Inventory add attributes permission.

Edit asset attributes

Deactivate asset attributes

Activate asset attributes

Create entity attributes

Edit entity attributes

Deactivate entity attributes

Activate entity attributes

Create vendor attributes

Edit vendor attributes

Deactivate vendor attributes

Activate vendor attributes

Create processing activity attributes

Edit processing activity attributes

Deactivate processing activity attributes

Activate processing activity attributes

Data Mapping Automation attributes data elements

View personal data

These permissions have been granted to the following system roles:

AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Governance Viewer, Disclosures Administrator, Data Mapping Automation Manager, ERM Manager, ESG Manager, Employee, Exchange Manager, IT Risk Approver, IT Risk Manager, Incident General User, Incidents Manager, Invited, Privacy Officer, Privacy Program Auditor, Project Owner, Project Respondent, Project Viewer, Site Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, TPDD Admin, Tech Risk & Compliance Admin, Vendor Manager, Vendorpedia Assessment Coordinator

These permissions have been granted to custom roles that were previously assigned the Data Mapping Automation attributes data elements permission.

View personal data activity

Inventory remove controls

Unlink assets from controls

These permissions have been granted to the following system roles:

Compliance Manager, Data Mapping Automation Manager, ERM Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager, TPDD Admin

These permissions have been granted to custom roles that were previously assigned the Inventory remove controls permission.

Unlink entities from controls

Unlink processing activities from controls

Issue edit related

Link issues to assets

These permissions have been granted to the following system roles:

AI Governance Manager, Compliance Manager, ERM Manager, Enterprise Policy Manager, IT Risk Manager, Policy Owner, Site Admin, Tech Risk & Compliance Admin, Vendor Manager, IT Risk Approver

These permissions have been granted to custom roles that were previously assigned the Issue edit related permission.

Link issues to entities

Link issues to vendors

Link issues to processing activities

Issue create

Create asset issues

These permissions have been granted to the following system roles:

AI Governance Manager, Compliance Manager, ERM Manager, Enterprise Policy Manager, IT Risk Manager, Policy Owner, Site Admin, Tech Risk & Compliance Admin, Vendor Manager, IT Risk Approver

These permissions have been granted to custom roles that were previously assigned the Issue create permission.

Create entity issues

Create vendor issues

Create processing activity issues

Configure attribute groups

Create asset attribute groups

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, ERM Manager, IT Risk Manager, Privacy Officer, Privacy Program Auditor, Site Admin, TPDD Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Configure attribute groups permission.

Edit asset attribute groups

Delete asset attribute groups

Create entity attribute groups

Edit entity attribute groups

Delete entity attribute groups

Create vendor attribute groups

Edit vendor attribute groups

Delete vendor attribute groups

Create processing activity attribute groups

Edit processing activity attribute groups

Delete processing activity attribute groups

Data Mapping processing activity view comments

Create processing activity comments

These permissions have been granted to the following system roles:

Compliance Manager, Data Mapping Automation Manager, ERM Manager, IT Risk Manager, Privacy Officer, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Data Mapping processing activity view comments permission.

View processing activity comments

Inventory archive attributes

Delete asset attributes

These permissions have been granted to the following system roles:

AI Governance Manager, Data Mapping Automation Manager, IT Risk Manager, Site Admin, TPDD Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Inventory archive attributes permission.

Delete entity attributes

Delete vendor attributes

Delete processing activity attributes

Vendor edit tasks

View vendor tasks

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, TPDD Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Vendor edit tasks permission.

Create task comments for vendors

Edit vendor tasks

Create task attachments for vendors

Delete task attachments for vendors

View vendor contracts

View asset contracts

These permissions have been granted to the following system roles:

IT Risk Manager, Privacy Officer, Project Viewer, Site Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, TPDD Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the View vendor contracts permission.

View entity contracts

View processing activity contracts

Data Mapping vendor view comments

Create vendor comments

These permissions have been granted to the following system roles:

Exchange Manager, IT Risk Manager, Privacy Officer, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager, Vendorpedia Assessment Coordinator

These permissions have been granted to custom roles that were previously assigned the Data Mapping vendor view comments permission.

View vendor comments

Legal entities edit tasks

View entity tasks

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, ERM Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin

These permissions have been granted to custom roles that were previously assigned the Legal entities edit tasks permission.

Create task comments for entities

Edit entity tasks

Create task attachments for entities

Delete task attachments for entities

Delete personal data for inventory records

Delete asset personal data

These permissions have been granted to the following system roles:

AI Governance Manager, Compliance Manager, Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, TPDD Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Delete personal data for inventory records permission.

Delete entity personal data

Delete processing activity personal data

Delete vendor personal data

These permissions have been granted to the following system roles:

Compliance Manager, Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, TPDD Admin, Tech Risk & Compliance Admin, Vendor Manager

Inventory view attributes

Export asset attributes

These permissions have been granted to the following system roles:

AI Governance Manager, Compliance Manager, Data Mapping Automation Manager, ERM Manager, Exchange Manager, IT Risk Manager, Privacy Officer, Privacy Program Auditor, Site Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, TPDD Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Inventory view attributes permission.

View asset attributes

View activity of asset attributes

Export entity attributes

View entity attributes

View activity of entity attributes

Export vendor attributes

View vendor attributes

View activity of vendor attributes

Export processing activity attributes

View processing activity attributes

View activity of processing activity attributes

Create personal data for inventory records and Edit personal data for inventory records

Edit asset personal data

These permissions have been granted to the following system roles:

AI Governance Manager, Compliance Manager, Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, TPDD Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned both the Create personal data for inventory records and Edit personal data for inventory records permissions.

Edit entity personal data

Edit processing activity personal data

Edit vendor personal data

These permissions have been granted to the following system roles:

Compliance Manager, Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, TPDD Admin, Tech Risk & Compliance Admin, Vendor Manager

Incidents manage related inventory

Unlink assets from incidents

These permissions have been granted to the following system roles:

Incident General User, Incidents Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin

These permissions have been granted to custom roles that were previously assigned the Incidents manage related inventory permission.

Link assets to incidents

Link entities to incidents

Unlink entities from incidents

Link incidents to personal data

Unlink personal data from incidents

Link vendors to incidents

Unlink vendors from incidents

Link processing activities to incidents

Unlink processing activities from incidents

Data Mapping asset view comments

Create asset comments

These permissions have been granted to the following system roles:

Compliance Manager, Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, TPDD Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Data Mapping asset view comments permission.

View asset comments

VRM add controls to vendor

Link vendors to controls

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the VRM add controls to vendor permission.

Create vendor controls

Asset edit tasks

View asset tasks

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Asset edit tasks permission.

Create task comments for assets

Edit asset tasks

Create task attachments for assets

Delete task attachments for assets

Add inventory controls

Link assets to controls

These permissions have been granted to the following system roles:

Compliance Manager, Data Mapping Automation Manager, ERM Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Add inventory controls permission.

Create asset controls

Link entities to controls

Create entity controls

Link processing activities to controls

Create processing activity controls

Data Mapping entity view comments

Create entity comments

These permissions have been granted to the following system roles:

Compliance Manager, Data Mapping Automation Manager, ERM Manager, IT Risk Manager, Privacy Officer, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Data Mapping entity view comments permission.

View entity comments

Inventory controls tab

View asset controls

These permissions have been granted to the following system roles:

Compliance Manager, Data Mapping Automation Manager, ERM Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Inventory controls tab permission.

View entity controls

View processing activity controls

Processing activity edit tasks

View processing activity tasks

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin

These permissions have been granted to custom roles that were previously assigned the Processing activity edit tasks permission.

Create task comments for processing activities

Edit processing activity tasks

Create task attachments for processing activities

Delete task attachments for processing activities

Incident inventory view related incident

View asset incidents

These permissions have been granted to the following system roles:

Incident General User, Incidents Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin

These permissions have been granted to custom roles that were previously assigned the Incident inventory view related incident permission.

View entity incidents

View personal data incidents

View vendor incidents

View processing activity incidents

View asset risks

View asset risks

These permissions have been granted to the following system roles:

AI Governance Manager, Data Governance Viewer, Data Mapping Automation Manager, ESG Manager, Exchange Manager, IT Risk Manager, Privacy Officer, Privacy Program Auditor, Project Viewer, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager, Site Admin

These permissions have been granted to custom roles that were previously assigned the View asset risks permission.

Create asset risks

These permissions have been granted to the following system roles:

AI Governance Manager, Data Mapping Automation Manager, ESG Manager, Exchange Manager, IT Risk Manager, Privacy Officer, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager, Site Admin

Vendor risks tab

View vendor risks

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Vendor risks tab permission.

Create vendor risks

View processing activity risks

View processing activity risks

These permissions have been granted to the following system roles:

AI Governance Manager, Data Governance Viewer, Data Mapping Automation Manager, ERM Manager, ESG Manager, Exchange Manager, IT Risk Manager, Privacy Officer, Privacy Program Auditor, Project Viewer, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the View processing activity risks permission.

Create processing activity risks

These permissions have been granted to the following system roles:

AI Governance Manager, Data Mapping Automation Manager, ERM Manager, ESG Manager, Exchange Manager, IT Risk Manager, Privacy Officer, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager

Unlink processing activity risks
Linked Permissions

The following permissions have been linked and will be automatically added or removed from the custom rule during configuration as defined below. For more information, see Understanding Linked Permissions.

Permission name

Explanation of changes

Inventory view attributes

  • When any of the permissions listed below are added to the custom role, the Inventory view attributes permission will be automatically added:

    • Export asset attributes

    • View asset attributes

    • View activity of asset attributes

    • Export entity attributes

    • View entity attributes

    • View activity of entity attributes

    • Export vendor attributes

    • View vendor attributes

    • View activity of vendor attributes

    • Export processing activity attributes

    • View processing activity attributes

    • View activity of processing activity attributes

View personal data

  • When any of the permissions listed below are added to the custom role, the View personal data permission will be automatically added:

    • Create personal data

    • Edit personal data

    • Merge personal data

Delete personal data

  • When the Delete personal data permission is added to the custom role, the Edit personal data permission will be automatically added.

Delete asset certificates

  • When the Delete asset certificates permission is added to the custom role, the Edit asset certificates permission will be automatically added.

March 13, 2026 - 202603.1.0

Split Permissions Across Data Mapping Automation

The following permissions across Data Mapping Automation have been split for more granular and precise access controls and have been granted to system and custom roles as defined below:

Old permission name

New permission name

System roles

Custom roles

Data Mapping Automation saved views

View assets saved views

These permissions have been granted to the following system roles:

AI Governance Manager, Audit Manager, Compliance Manager, Data Mapping Automation Manager, Digital Policy Manager, Digital Policy Owner, Enterprise Policy Manager, Ethics Policy Manager, Ethics Policy Owner, Ethics Policy Restricted Owner, IT Risk Manager, Incident General User, Policy Owner, Privacy Notice Author, Privacy Notice Manager, Privacy Officer, Privacy Program Auditor, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the View assets permission.

Create asset saved views

Edit asset saved views

Delete asset saved views

View entity saved views

These permissions have been granted to the following system roles:

AI Governance Manager, Audit Manager, Compliance Manager, Data Mapping Automation Manager, Digital Policy Manager, Digital Policy Owner, ERM Manager, Enterprise Policy Manager, Ethics Policy Manager, Ethics Policy Owner, Ethics Policy Restricted Owner, IT Risk Manager, Incident General User, Policy Owner, Privacy Notice Author, Privacy Notice Manager, Privacy Officer, Privacy Program Auditor, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the View entities permission.

Create entity saved views

Edit entity saved views

Delete entity saved views

View processing activity saved views

These permissions have been granted to the following system roles:

AI Governance Manager, Audit Manager, Compliance Manager, Data Mapping Automation Manager, Digital Policy Manager, Digital Policy Owner, Enterprise Policy Manager, Ethics Policy Manager, Ethics Policy Owner, Ethics Policy Restricted Owner, IT Risk Manager, Incident General User, Policy Owner, Privacy Notice Author, Privacy Notice Manager, Privacy Officer, Privacy Program Auditor, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the View processing activities permission.

Create processing activity saved views

Edit processing activity saved views

Delete processing activity saved views

View vendor saved views

These permissions have been granted to the following system roles:

Compliance Manager, Data Mapping Automation Manager, Digital Policy Manager, Digital Policy Owner, Enterprise Policy Manager, Ethics Policy Manager, Ethics Policy Owner, Ethics Policy Restricted Owner, Exchange Manager, IT Risk Manager, Incident General User, Privacy Notice Author, Privacy Notice Manager, Privacy Officer, Privacy Program Auditor, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager, Vendorpedia Assessment Coordinator

These permissions have been granted to custom roles that were previously assigned the View vendors permission.

Create vendor saved views

Edit vendor saved views

Delete vendor saved views

Inventory view audit history

View asset activity

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, ERM Manager, IT Risk Manager, Privacy Officer, Privacy Program Auditor, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Inventory view audit history permission.

View vendor activity

View entity activity

View processing activities activity

View asset personal data activity

View vendor personal data

View entity personal data activity

View processing activity personal data activity

DM view inventory relationships

View asset related objects

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, Exchange Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the DM view inventory relationships permission.

View entity related objects

View object related items

View processing activity related objects

View attribute related objects

View vendor related objects

View relationships

DM create inventory relationships

Create asset related objects

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, Exchange Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the DM create inventory relationships permission.

Create entity related objects

Create object related items

Create processing activity related objects

Create vendor related objects

DM edit inventory relationships

Edit asset related objects

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned both the DM edit inventory relationships and DM view inventory relationships details permissions.

Edit entity related objects

Edit object related items

Edit processing activity related objects

Edit vendor related objects

Edit attribute related objects

This permission has been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned both the DM edit inventory relationships and DM view inventory relationships details permissions.

DM delete inventory relationships

Delete asset related objects

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the DM delete inventory relationships permission.

Delete entity related objects

Delete object related items

Delete processing activity related objects

Delete vendor related objects

DM view relationship personal data

View personal data related objects for assets

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the DM view relationship personal data permission.

View personal data related objects for processing activities

View personal data related objects for entities

View personal data related objects for vendors

DM edit relationship personal data

Edit personal data related objects for assets

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the DM edit relationship personal data permission.

Edit personal data related objects for processing activities

Edit personal data related objects for entities

Edit personal data related objects for vendors

DM view inventory relationship activity history

View activity of asset related objects

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the DM view inventory relationship activity history permission.

View activity of entity related objects

View activity of processing activity related objects

View activity of vendor related objects

DM view related attribute manager

View attribute related objects

This permission has been granted to the following system roles:

Data Mapping Automation Manager, Exchange Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

This permission has been granted to custom roles that were previously assigned the DM view related attribute manager permission.

Create attribute related objects

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the DM view related attribute manager permission.

Edit attribute related objects

Delete attribute related objects
Split Permissions for Vendor Attachments

The following permissions for vendor attachments have been split for more granular and precise access controls. These permissions now control users' ability to view, create, edit, delete, upload, or download attachments on inventory records. Roles that previously allowed users to view, create, edit, delete, upload, or download attachments on inventory records will continue to have the same access, and no manual role changes are required. These permissions have been granted to system and custom roles as defined below:

Old permission name

New permission name

System roles

Custom roles

Vendor attachments tab

View asset attachments

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager, Vendorpedia Assessment Coordinator

These permissions have been granted to custom roles that were previously assigned both the Vendor attachments tab and File read permissions.

View entity attachments

View vendor attachments

View processing activity attachments

Download asset attachments

Download entity attachments

Download vendor attachments

Download processing activity attachments

Create asset attachments

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager, Vendorpedia Assessment Coordinator

These permissions have been granted to custom roles that were previously assigned both the Vendor attachments tab and File create permissions.

Create entity attachments

Create vendor attachments

Create processing activity attachments

Upload asset attachments

Upload entity attachments

Upload vendor attachments

Upload processing activity attachments

Edit vendor attachments

Edit asset attachments

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager, Vendorpedia Assessment Coordinator

These permissions have been granted to custom roles that were previously assigned both the Edit vendor attachments and File create permissions.

Edit entity attachments

Edit vendor attachments

Edit processing activity attachments

Delete vendor attachments

Delete asset attachments

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager, Vendorpedia Assessment Coordinator

These permissions have been granted to custom roles that were previously assigned both the Delete vendor attachments and File delete permissions.

Delete entity attachments

Delete vendor attachments

Delete processing activity attachments
Split Permissions for Inventory Assessments

The following permissions for inventory assessments have been split for more granular and precise access controls. These permissions now control users' ability to create, view, link, or unlink assessments on inventories. Roles that previously allowed users to create, view, link, or unlink assessments on inventory records will continue to have the same access, and no manual role changes are required. These permissions have been granted to system and custom roles as defined below:

Old permission name

New permission name

System roles

Custom roles

Data Mapping Automation inventory assets launch assessment

Create asset assessments

This permission has been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

This permission has been granted to custom roles that were previously assigned the following full set of permissions:

  • Data Mapping Automation inventory assets launch assessment

  • Assessment create

  • DM AssessmentV2

Data Mapping Automation inventory legal entity launch

Create entity assessments

This permission has been granted to the following system roles:

Data Mapping Automation Manager, ERM Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

This permission has been granted to custom roles that were previously assigned the following full set of permissions:

  • Data Mapping Automation inventory legal entity launch

  • Assessment create

  • DM AssessmentV2

Data Mapping Automation inventory PA launch

Create processing activity assessments

This permission has been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager

This permission has been granted to custom roles that were previously assigned the following full set of permissions:

  • Data Mapping Automation inventory PA launch

  • Assessment create

  • DM AssessmentV2

Launch vendor assessment

Create vendor assessments

This permission has been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager, Vendorpedia Assessment Coordinator

This permission has been granted to custom roles that were previously assigned both the Launch vendor assessment and Assessment create permissions.

Projects inventory associate

Link assets to assessments

These permissions have been granted to the following system roles:

AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, ERM Manager, ESG Manager, Exchange Manager, IT Risk Manager, Incidents Manager, Managed Service Provider, Maturity & Planning Manager, Privacy Officer, Program Benchmarking Manager, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager, Vendorpedia Assessment Coordinator

These permissions have been granted to custom roles that were previously assigned the Projects inventory associate permission.

Link entities to assessments

Link processing activities to assessments

Link vendors to assessments

Projects inventory delete

Unlink assets from assessments

These permissions have been granted to the following system roles:

AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, ERM Manager, ESG Manager, Exchange Manager, IT Risk Manager, Incidents Manager, Managed Service Provider, Maturity & Planning Manager, Privacy Officer, Program Benchmarking Manager, Site Admin, TPDD Admin, Tech Risk & Compliance Admin, Vendor Manager, Vendorpedia Assessment Coordinator

These permissions have been granted to custom roles that were previously assigned the Projects inventory delete permission.

Unlink entities from assessments

Unlink processing activities from assessments

Unlink vendors from assessments

Data Mapping Automation assessments list

View asset assessments

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Project Owner, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Data Mapping Automation assessments list permission.

View entity assessments

View processing activity assessments

View vendors API access

View vendor assessments

This permission has been granted to the following system roles:

Compliance Manager, Data Mapping Automation Manager, Digital Policy Manager, Digital Policy Owner, Enterprise Policy Manager, Ethics Policy Manager, Ethics Policy Owner, Ethics Policy Restricted Owner, Exchange Manager, IT Risk Manager, Incident General User, Privacy Notice Author, Privacy Notice Manager, Privacy Officer, Privacy Program Auditor, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager, Vendorpedia Assessment Coordinator

This permission has been granted to custom roles that were previously assigned the View vendors API access permission.
Split Permissions from Policy Management & Privacy Notice Management

Various permissions have been added within the Data Mapping Automation permission group and split from existing permissions within the Policy Management and Privacy Notice Management permission groups for more granular and precise access controls. The existing permissions within the Policy Management and Privacy Notice Management permission groups will be retained. The following permissions now control users' ability to view, link, and unlink assets, entities, vendors, and processing activities with policies, standards, procedures, and privacy notices. These permissions have been granted to system and custom roles as defined below:

Old permission name

New permission name

System roles

Custom roles

EPM manage related inventory

Link asset policies

These permissions have been granted to the following system roles:

Enterprise Policy Manager, Ethics Policy Manager, Ethics Policy Owner, Ethics Policy Restricted Owner, Policy Owner, Privacy Officer, Site Admin, Tech Risk & Compliance Admin

These permissions have been granted to custom roles that were previously assigned the EPM manage related inventory permission.

Link asset standards

Link asset procedures

Link entity policies

Link entity standards

Link entity procedures

Link vendor policies

Link vendor standards

Link vendor procedures

Link processing activity policies

Link processing activity standards

Link processing activity procedures

EPM remove related

Unlink asset policies

These permissions have been granted to the following system roles:

Enterprise Policy Manager, Ethics Policy Manager, Ethics Policy Owner, Ethics Policy Restricted Owner, Policy Owner, Privacy Officer, Site Admin, Tech Risk & Compliance Admin

These permissions have been granted to custom roles that were previously assigned both the EPM manage related inventory and EPM remove related permissions.

Unlink asset standards

Unlink asset procedures

Unlink entity policies

Unlink entity standards

Unlink entity procedures

Unlink vendor policies

Unlink vendor standards

Unlink vendor procedures

Unlink processing activity standards

Unlink processing activity policies

Unlink processing activity procedures

EPM view policy list

View asset policies

These permissions have been granted to the following system roles:

Campaign Administrator, Compliance Manager, EPM Policy View Only, EPM View Only, Enterprise Policy Manager, Ethics Policy Manager, Ethics Policy Owner, Ethics Policy Restricted Owner, Policy Owner, Privacy Officer, Site Admin, Tech Risk & Compliance Admin

These permissions have been granted to custom roles that were previously assigned both the EPM manage related inventory and EPM view policy list permissions.

View asset standards

View asset procedures

View entity policies

View entity standards

View entity procedures

View vendor policies

View vendor standards

View vendor procedures

View processing activity policies

View processing activity standards

View processing activity procedures

PNM manage related inventory

Link asset privacy notices

These permissions have been granted to the following system roles:

Digital Policy Manager, Digital Policy Owner, Privacy Notice Author, Privacy Notice Manager, Privacy Officer, Site Admin

These permissions have been granted to custom roles that were previously assigned the PNM manage related inventory permission.

Link entity privacy notices

Link vendor privacy notices

Link processing activity privacy notices

PNM remove related

Unlink asset privacy notices

These permissions have been granted to the following system roles:

Digital Policy Manager, Digital Policy Owner, Privacy Notice Author, Privacy Notice Manager, Privacy Officer, Site Admin

These permissions have been granted to custom roles that were previously assigned both the PNM manage related inventory and PNM remove related permissions.

Unlink entity privacy notices

Unlink vendor privacy notices

Unlink processing activity privacy notices

Privacy Notice Management

View asset privacy notices

These permissions have been granted to the following system roles:

Digital Policy Manager, Digital Policy Owner, Digital Policy Viewer, Privacy Notice Author, Privacy Notice Manager, Privacy Notice Viewer, Privacy Officer, Privacy Template Author, Site Admin

These permissions have been granted to custom roles that were previously assigned both the PNM manage related inventory and Privacy Notice Management permissions.

View entity privacy notices

View vendor privacy notices

View processing activity privacy notices
Linked Permissions

The following permissions have been linked and will be automatically added or removed from the custom rule during configuration as defined below. For more information, see Understanding Linked Permissions.

Permission name

Explanation of changes

View asset related objects

  • When any of the permissions listed below are added to the custom role, the View relationships permission and the View attribute related objects permission will be automatically added:

    • View asset related objects

    • View vendor related objects

    • View processing activity related objects

    • View entity related objects

View vendor related objects

View processing activity related objects

View entity related objects