Permissions Release Notes: Third-Party Due Diligence

This article consolidates all permissions release notes for Third-Party Due Diligence since the OneTrust 202506.1.0 release, providing a single reference point for changes that impact roles, access, and permissions. Each section below corresponds to a release version and includes permissions release notes announced for the product in the respective release. The absence of a release below indicates that there were no permissions release notes announced for the product for that release. For details on permissions release notes across the platform, see Permissions Release Notes Catalog.

Important:

Starting in the OneTrust 202601.1.0 release, permissions release notes related to this product will be exclusively published in this article. If permissions release notes exist, the following note will appear within the Permissions section for the respective product on the myOneTrust Release Notes page with a link to this article:

"Permission changes have been implemented to improve platform usability and administrative efficiency. For more information, see Permissions Release Notes: [Product Name]. For a complete list of products with permission updates in this release, see Permissions Release Notes Catalog."

September 25, 2026 - 202509.2.0

Split Permissions

The following permissions have been split for more granular and precise access controls and have been granted to system and custom roles as defined below:

Old permission name

New permission name

System roles

Custom roles

TPDD configurable screening templates

View screening templates

These permissions have been granted to the Site Admin and TPDD Admin system roles.

These permissions have been granted to custom roles that were previously assigned the TPDD configurable screening templates permission.

Create screening templates

Delete screening templates

Edit screening templates

TPDD screening results

View screening results for vendors

These permissions have been granted to the following system roles:

Site Admin, TPDD Admin, TPDD  Compliance Manager, and TPDD Enhanced Due Diligence Requester

These permissions have been granted to custom roles that were previously assigned the TPDD screening results permission.

Confirm screening results for vendors

Dismiss screening results for vendors

TPDD match feedback workflow

Confirm screening results for vendors

These permissions have been granted to the following system roles:

Site Admin, TPDD Admin, TPDD Compliance Manager, and TPDD Enhanced Due Diligence Requester

These permissions have been granted to custom roles that were previously assigned the TPDD match feedback workflow permission.

Dismiss screening results for vendors
Renamed Permissions

The following permissions have been renamed to improve clarity on the actions associated with each individual permission. No changes have been made to permission functionality:

Old permission name

New permission name

TPDD export screening results

Export screening results for vendors
Linked Permissions

The following permissions have been linked and will be automatically added or removed from the custom rule during configuration as defined below. For more information, see Understanding Linked Permissions.

Permission name

Explanation of changes

View screening templates

  • When any of the permissions listed below are added to the custom role, the View screening templates permission will be automatically added.

    • Create screening templates

    • Edit screening templates

    • Delete screening templates

Create screening templates

  • When the Create screening templates permission is added to the custom role, the Viewing Screening templates and Edit screening templates permissions will be automatically added.

Edit screening templates

  • When the Edit screening templates permission is added to the custom role, the View screening templates permission will be added.

Delete screening templates

  • When the Delete screening templates permission is added to the custom role, the View screening templates permission will be automatically added.

View screening results for vendors

  • When any of the permissions listed below are added to the custom role, the View screening results for vendors permission will be automatically added:

    • Add attachments to screening results for vendors

    • Confirm screening results for vendors

    • Dismiss screening results for vendors

    • Export screening results for vendors

    • View activity for screening results for vendors

  • When the View screening results for vendors permission is removed from the custom role, then the following permissions will be automatically removed:

    • Add attachments to screening results for vendors

    • Confirm screening results for vendors

    • Dismiss screening results for vendors

    • Export screening results for vendors

    • View activity for screening results for vendors

May 15, 2026 - 202605.1.0 (Spring Release)

  • For users with access to Third-Party Due Diligence, the Third parties item on the navigation menu will now be visible to these users by default regardless of whether they have permission to view that inventory. However, users will not be able to view inventory information on that screen without the necessary permission.

January 30, 2026 - 202601.2.0

Assessments – Invited User Security Enhancements

OneTrust is implementing new permission controls for Invited Users and Project Respondents to align front-end access controls with back-end API behaviors. This update ensures that low-privilege users cannot access metadata or assessment content outside their assigned scope. A new permission will be available for customers who need to restore the broader access level previously granted to their Invited Users.

No action is required unless you want Invited Users to retain their previous access. If you want Invited Users to retain their previous access, you can assign the newly introduced Advanced assessment metadata permission manually to a custom copy of the Invited User role after the change goes live in OneTrust 202601.2.0. Those users with the Invited User role will then need to be reassigned to the custom invited user role with the new permission.

For more information, see Assessments – Invited User Security Enhancements, Invited Users FAQ, and Project Respondents FAQ. For a complete list of products with permission updates in this release, see Permissions Release Notes Catalog.

October 3, 2025 - 202510.1.0

Merged Permissions

The following permissions have been merged. The existing functionality is now controlled by a single permission as defined below:

Permission name

Explanation of changes

TPDD match feedback workflow

The TPDD confirm match, TPDD dismiss match, and TPDD match feedback workflow permissions were merged into the TPDD match feedback workflow permission.

September 12, 2025 - 202509.1.0

  • As part of permission standardization efforts, some permissions have been updated. Because of this, some custom roles may no longer be able to view vendor records or other inventory items. This change is expected. Please review your custom roles and enable the permissions below as necessary to restore access:

    • Assets: Data Mapping Automation inventory assets

    • Processing Activities: Data Mapping Automation inventory processing activity

    • Entities: Data Mapping Automation entities inventory

    • Vendors: Vendor Basic Fields View & Vendor Advanced Fields View

    • Attributes: Inventory view attributes