Permissions Release Notes: Third-Party Risk Management (Spring '25 - Winter '26)

View engagement public views

The View engagement public views permission has been added and now controls users' ability to view public views on the Engagements list screen.

This permission has been granted to the following system roles:

Data Mapping Automation manager, IT Risk manager, Privacy officer, Site admin, Tech Risk & Compliance admin, Vendor manager

This permission has been granted to custom roles that were previously assigned the Manage engagement public views permission.

View vendor engagement public views

The View vendor engagement public views permission has been added and now controls users' ability to view public views on the Engagement tab.

This permission has been granted to the following system roles:

Data Mapping Automation manager, IT Risk manager, Privacy officer, Site admin, Tech Risk & Compliance admin, Vendor manager

This permission has been granted to custom roles that were previously assigned the Manage engagement public views permission.

Contract comments view

• When the Contract comments view permission is removed from the custom role, the Contract comments create permission will be automatically removed.

View contract personal data relationships

• When the View contract personal data relationships permission is added to the custom role, the Contracts view relationships permission will be automatically added.

• When the Contracts view relationships permission is removed from the custom role, the View contract personal data relationships permission will be automatically removed

Add contracts from contracts list view

Create contracts 

Delete vendor contracts

Delete contracts

Contracts full view

View advanced fields for contracts

Contracts limited view

View basic fields for contracts

Contract comments create

Create contract comments

Contract comments view

View contract comments

Assign viewer

Assign contract viewers

Assign editor

Assign contract editors

Assign record admin

Assign contract record admin

Create contract relationships

Create contract related objects

Contracts view relationships

View contract related objects

Contracts add and edit relationships

Edit contract related objects

Contracts remove relationships

Remove related objects from contracts

Remove shared contracts

Remove access for shared contracts

View contract personal data relationships

View personal data in contract relationships

Edit contracts personal data relationships

Edit personal data in contract relationships

Template contract question

Create contract questions on assessment templates

Create Custom Contract Attribute

Create custom contract attributes

Edit Custom Contract Attribute

Edit custom contract attributes

TPRM contract attribute manager

View custom contract attributes

TPRM contract groups

Create contract attribute groups

Delete Contract attribute group

Delete contract attribute groups

Contract automation rule

Create contract automation rules

Admin saved views for contracts list

Create a saved view of contracts

Edit Admin saved views for contracts list

Edit a saved view of contracts

Delete Admin saved views for contracts list

Delete a saved view of contracts

Contracts linked to vendors view

The Contracts linked to vendors view permission has been moved from the Data Mapping Automation permission group to the Third-Party Risk Management permission group.

Edit contract status field

The Edit contract status field permission has been added to allow users to edit a contract's status.

This permission has been granted to the following system roles:

IT risk manager. Privacy officer, Site admin, Tech Risk & Compliance admin, Vendor manager

This permission has been granted to custom roles that were previously assigned the Edit contracts permission.

Bulk export engagement PDF reports

The Bulk export engagement PDF reports permission has been added and now controls users' ability to bulk export PDF reports for engagements.

This permission has been granted to the following system roles:

IT risk manager. Privacy officer, Site admin, Tech Risk & Compliance admin, Vendor manager

This permission has been granted to custom roles that were previously assigned the Export engagement PDF report permission.

Create engagement assessments

The Create engagement assessments permission has been added and now controls users' ability to create assessments for engagements.

This permission has been granted to the following system roles:

IT risk manager. Privacy officer, Site admin, Tech Risk & Compliance admin, Vendor manager

This permission has been granted to custom roles that were previously assigned the Assessment create permission.

Create contract attachments

• When the Create contract attachments permission is added to the custom role, the View contract attachments permission is automatically added.

View contract attachments

• When the View contract attachments permission is removed from the custom role, the following permissions will be automatically removed:

  • Delete contract attachments

  • Edit contract attachments

  • Create contract attachments

Create engagement attachments

• When the Create engagement attachments permission is added to the custom role, the View engagement attachments permission will be automatically added.

Delete engagement attachments

• When the Delete engagement attachments permission is added to the custom role, the View engagement attachments permission will be automatically added.

Edit engagement attachments

• When the Edit engagement attachments is added to the custom role, the following permissions will be automatically added:

  • Delete engagement attachments

  • View engagement attachments

View engagement comments

• When the View engagement comments permission is removed from the custom role, the Create engagement comments permission will be automatically removed.

View engagement related objects

• When the View engagement related objects permission is removed from the custom role, the View personal data in engagement relationships permission will be automatically removed.

View personal data in engagement relationships

• When the View personal data in engagement relationships permission is added to the custom role, the View engagement related objects permission will be automatically added.

View engagement issues

• When the View engagement issues permission is removed from the custom role, the following permissions will be automatically removed:

  • Create engagement issues

  • Link issues to engagement

Edit engagement attributes

• When the Edit engagement attributes permission is added to the custom role, the Change engagement vendor permission will be automatically added.

Edit engagement status field

• When the Edit engagement status field permission is added to the custom role, the View engagement basic fields permission will be automatically added.

Create engagement contracts

• When the Create engagement contracts permission is added to the custom role, the View engagement contracts permission will be automatically added.

View engagement assessments

• When the View engagement assessments permission is removed from the custom role, the following permissions will be automatically removed:

  • Link assessments to engagement

  • Unlink engagement assessments

  • Create engagement assessments

View engagement activity

• The link between the View engagement activity permission and the Create engagements, Edit engagement attributes, Delete engagements, Export engagements, and Edit engagement status field permissions has been removed.

View contract activity

• The link between the View contract activity permission and the Add contracts from contracts list view, Edit contracts, and Delete vendor contracts permissions has been removed.

Create engagement assessments

The Create engagement assessments permission has been added and now controls users' ability to create assessments in engagements.

This permission has been granted to the following system roles:

IT risk manager, Privacy officer, Site admin, Tech Risk & Compliance admin, Vendor manager

This permission has been granted to custom roles that were previously assigned the Assessment Create permission.

Download engagement attachments

The Download engagement attachments permission has been added and now controls users' ability to download attachments for engagements.

This permission has been granted to the following system roles:

IT risk manager, Privacy officer, Site admin, Tech Risk & Compliance admin, Vendor manager

This permission has been granted to custom roles that were previously assigned the View engagement attachments permission.

Edit engagement related objects

The Edit engagement related objects permission has been added and now controls users' ability to edit related objects in engagements.

This permission has been granted to the following system roles:

Data Mapping Automation manager, IT risk manager, Privacy officer, Site admin, Tech Risk & Compliance admin, Vendor manager

This permission has been granted to custom roles that were previously assigned the full set of permissions listed below:

• Engagements Related Tab View

• Create engagement related objects

• Delete engagement related objects

• DM edit inventory relationships

View personal data in engagement relationships

The View personal data in engagement relationships permission has been added and now controls users' ability to view personal data in relationships for engagements.

This permission has been granted to the following system roles:

Data Mapping Automation manager, IT risk manager, Privacy officer, Site admin, Tech Risk & Compliance admin, Vendor manager

This permission has been granted to custom roles that were previously assigned the DM view relationship personal data permission.

Edit personal data in engagement relationships

The Edit personal data in engagement relationships permission has been added and now controls users' ability to edit personal data in relationships for engagements.

This permission has been granted to the following system roles:

Data Mapping Automation manager, IT risk manager, Privacy officer, Site admin, Tech Risk & Compliance admin, Vendor manager

This permission has been granted to custom roles that were previously assigned the DM edit relationship personal data permission.

Create engagement issues

• When the Create engagement issues permission is added to the custom role, the View engagement issues permission will be automatically added.

Link issues to engagement

• When the Link issues to engagement permission is added to the custom role, the View engagement issues permission will be automatically added.

Engagements limited view

View engagement basic fields

Engagements full view

View engagement advanced fields

TPRM engagement edit

Edit engagement attributes

Unlink assessments from engagements

Unlink engagement assessments

Engagement assessments tab view

View engagement assessments

Link assessments to engagements

Link assessments to engagement

Engagements activity tab view

View engagement activity

Engagements personal data tab view

View engagement personal data

Add Or Update Personal Data

Edit engagement personal data

TPRM issues engagements

View engagement issues

Create issue on engagement

Create engagement issues

Link Issue to Engagement

Link issues to engagement

Reassign Engagement

Change engagement vendor

Export Engagement PDF Reports

Export engagement PDF report

Delete vendor engagements

Delete engagements

Engagement change status

Edit engagement status field

TPRM engagement add

Create engagements

Create Comments on Engagements

Create engagement comments

Engagement comments view

View engagement comments

Add engagement attachments

Create engagement attachments

Engagement documents tab

View engagement attachments

Create and edit engagement risks

Edit engagement risks

Unlink risk from engagement

Unlink engagement risks

Delete and unlink risks on engagements

Delete engagement risks

Engagements view relationships

View engagement related objects

Engagements add and edit relationships

Create engagement related objects

Engagements remove relationships

Delete engagement related objects

Engagement view tasks

View engagement tasks

Engagement add tasks

Create engagement tasks

Engagement delete tasks

Delete engagement tasks

Add comment for engagement task

Create engagement task comments

Engagement edit tasks

Edit engagement tasks

Contracts Linked to Engagements - View

View engagement contracts

TPRM engagement change workflow

Change engagement workflow

Engagement Workflow Stage Edit

Change engagement workflow stage

Assign editor

Assign engagement editor

Assign record admin

Assign engagement record admin

Assign viewer

Assign engagement viewer

Vendor engagement workflows

View engagement workflows

Create engagement service

Create engagement assets

View engagement services

View engagement assets

Contracts Linked to Engagements - Add

Create engagement contracts

TPRM engagement export

Export engagements

Delete Personal Data

Delete engagement personal data

Add attachment for engagement task

Create engagement task attachments

Delete attachment for engagement task

Delete engagement task attachments

Export engagement attributes

Export engagement attribute list

Engagement automation rule

Create engagement automation rules

Create Custom Engagement Attribute

Create custom engagement attributes

Edit Custom Engagement Attribute

Edit custom engagement attributes

TPRM engagement attribute manager

View custom engagement attributes

Engagement column reports

View engagement column reports

DORA report export

Export DORA reports

Create Engagement PDF reports

Create PDF engagement reports

Manage engagement public views

Create a public view of engagements

Delete engagement public views

Delete a public view of engagements

Edit engagement public views

Edit a public view of engagements

Manage vendor engagement public views

Create a public view of vendor engagements

Delete vendor engagement public views

Delete a public view of vendor engagements

Edit vendor engagement public views

Edit a public view of vendor engagements

Template engagement question

Create engagement questions on assessment templates

Engagement workflow rules create

Create engagement workflow rules

Create engagement workflow

Create engagement workflows

Delete vendor engagement workflow

Delete engagement workflows

Edit vendor engagement workflow

Edit engagement workflows

Publish vendor engagement workflow

Publish engagement workflows

TPRM engagement workflow rules edit

Edit engagement workflow stage rules

TPRM engagement workflows rules

View engagement workflow stage rules

View vendor engagement workflows list

View engagement workflow setup

Reassign Engagement

The Reassign Engagement permission has been added and now controls users' ability to edit the vendor on an engagement by reassigning the engagement.

This permission has been granted to the following system roles:

IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

This permission has been granted to custom roles that were previously assigned the TPRM engagement edit permission.

Export Engagement PDF Reports

The Export Engagement PDF Reports permission has been added and now control users' ability to export engagement records as PDF.

This permission has been granted to the following system roles:

IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

This permission has been granted to custom roles that were previously assigned the TPRM engagement export permission.

Create engagement contracts

The Create engagement contracts permission has been added and now controls users' ability to manage contract creation.

This permission has been granted to the following system roles:

IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

This permission has been granted to custom roles that were previously assigned the Add contracts from contracts list view permission.

Contracts Linked to Engagements - View

• When the Contracts Linked to Engagements - View permission is removed from the custom role, the Contracts Linked to Engagements - Add permission will be automatically removed.

Create engagement risks

• When the Create engagement risks permission is added to the custom role, the following permissions will be automatically added:

  • Create and edit engagement risks

  • View engagement risks

Unlink risk from engagement

• When the Unlink risk from engagement permission is added to the custom role, the following permissions will be automatically added:

  • Create and edit engagement risks

  • View engagement risks

Contract comments create

• When the Contract comments create permission is added to the custom role, the Contract comments view permission will be automatically added.

TPRM engagement change workflow

• When the TPRM engagement change workflow permission is added to the custom role, the Vendor engagement workflows permission will be automatically added.

Engagement Workflow Stage Edit

• When the Engagement Workflow Stage Edit permission is added to the custom role, the Vendor engagement workflows permission will be automatically added.

Vendor engagement workflows

• When the Vendor engagement workflows permission is removed from the custom role, the following permissions will be automatically removed:

  • Engagement Workflow Stage Edit

  • TPRM engagement change workflow

Create Comments on Engagements

• When the Create Comments on Engagements permission is added to the custom role, the Engagement comments view permission will be automatically added.

Vendor workflow rules

The Vendor workflow rules permission has been moved from the Third-Party Risk Management permission group to the Data Mapping Automation permission group.

Vendor workflow rules create

The Vendor workflow rules create permission has been moved from the Third-Party Risk Management permission group to the Data Mapping Automation permission group.

Vendor workflow rules edit

The Vendor workflow rules edit permission has been moved from the Third-Party Risk Management permission group to the Data Mapping Automation permission group.

Vendor workflow rules delete

The Vendor workflow rules delete permission has been moved from the Third-Party Risk Management permission group to the Data Mapping Automation permission group.

View contracts list

Contracts limited view

These permissions have been granted to the following system roles:

IT risk manager, Privacy officer, Site admin, Tech Risk & Compliance admin, Vendor manager

These permissions have been granted to custom roles that were previously assigned the View contracts list permission.

Contracts full view

DORA report export

• When the DORA report export permission is added to the custom role, the View settings Third-Party Risk Management permission will be automatically added.

Add attachment for engagement task

• When the Add attachment for engagement task permission is added to the custom role, the Engagement view tasks permission will be automatically added.

Add comment for engagement task

• When the Add comment for engagement task permission is added to the custom role, the Engagement view tasks permission will be automatically added.

Engagement add tasks

• When the Engagement add tasks permission is added to the custom role, the following permissions will be automatically added:

  • Engagement view tasks

  • Add attachment for engagement task

  • Add comment for engagement task

• When the Engagement add tasks permission is removed from the custom role, the following permissions will be automatically removed:

  • Add attachment for engagement task

  • Add comment for engagement task

Engagement delete tasks

• When the Engagement delete tasks permission is added to the custom role, the following permissions will be automatically added:

  • Engagement view tasks

  • Delete attachment for engagement task

• When the Engagement delete tasks permission is removed from the custom role, the Delete attachment for engagement task permission will be automatically removed.

Engagement edit tasks

• When the Engagement edit tasks permission is added to the custom role, the following permissions will be automatically added:

  • Engagement view tasks

  • Add attachment for engagement task

  • Add comment for engagement task

Engagement view tasks

• When the Engagement view tasks permission is removed from the custom role, the following permissions will be automatically removed:

  • Engagement edit tasks

  • Engagement add tasks

  • Engagement delete tasks

  • Add attachment for engagement task

  • Delete attachment for engagement task

  • Add comment for engagement task

Engagement documents tab

• When the Engagement documents tab permission is removed from the custom role, the following permissions will be automatically removed:

  • Delete engagement attachments

  • Edit engagement attachments

  • Add engagement attachments

Add Or Update Personal Data

• When the Add Or Update Personal Data permission is added to the custom role, the Engagements personal data tab view permission will be automatically added.

Engagements personal data tab view

• When the Engagements personal data tab view permission is removed from the custom role, the following permissions will be automatically removed:

  • Add Or Update Personal Data

  • Delete Personal Data

Add Or Update Personal Data

The Add Or Update Personal Data permission has been added and now controls users' ability to add or update personal data for engagements.

This permission has been granted to the following system roles:

IT risk manager, Privacy officer, Site admin, Tech Risk & Compliance admin, Vendor manager

This permission has been granted to custom roles that were previously assigned the Engagement Personal Data Elements permission.

Delete Personal Data

The Delete Personal Data permission has been added and now controls users' ability to delete personal data for engagements.

This permission has been granted to the following system roles:

IT risk manager, Privacy officer, Site admin, Tech Risk & Compliance admin, Vendor manager

This permission has been granted to custom roles that were previously assigned the Engagement Personal Data Elements permission.

Vendor Management settings

View settings Third-Party Risk Management

These permissions have been granted to the following system roles:

ESG Manager, Exchange Manager, Incidents Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager, Vendorpedia Assessment Coordinator

These permissions have been granted to custom roles that were previously assigned the Vendor Management settings permission.

Edit Settings Third-Party Risk Management

Vendor Inventory List

Vendor basic fields view

These permissions have been granted to the following system roles:

Compliance Manager, Data Mapping Automation Manager, Digital Policy Manager, Digital Policy Owner, Enterprise Policy Manager, Ethics Policy Manager, Ethics Policy Owner, Ethics Policy Restricted Owner, Exchange Manager, IT Risk Manager, Incident General User, Privacy Notice Author, Privacy Notice Manager, Privacy Officer, Privacy Program Auditor, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager, Vendorpedia Assessment Coordinator

These permissions have been granted to custom roles that were previously assigned the Vendor Inventory List permission.

Vendor advanced fields view

Delete Personal Data

• When the Delete Personal Data permission is added to the custom role, the following permissions will be automatically added:

  • Engagements personal data tab view

  • Add or update personal data

Vendor specific emails

• When the Vendor specific emails permission is added to the custom role, the View settings Third-Party Risk Management permission will be automatically added.

Manage DORA attributes and report

• When the Manage DORA attributes and report permission is added to the custom role, the View settings Third-Party Risk Management permission will be automatically added.

View Custom Contract Attribute

View Custom Contract Attribute

These permissions have been granted to the following system roles:

IT Risk Manager, Privacy Officer, Privacy Program Auditor, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the View Custom Contract Attribute permission.

Create Custom Contract Attribute

Edit Custom Contract Attribute

VRM Contract Groups

Create Custom Contract Attribute Groups

Create Custom Contract Attribute Groups

These permissions have been granted to the following system roles:

IT Risk Manager, Privacy Officer, Privacy Program Auditor, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the VRM Contract Groups permission or the Create Custom Contract Attribute Groups permission.

Edit Contract attribute groups

View Contract attribute groups

Delete Contract attribute group

View Custom Engagement Attribute

View Custom Engagement Attribute

These permissions have been granted to the following system roles:

IT Risk Manager, Privacy Officer, Privacy Program Auditor, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the View Custom Engagement Attribute permission.

Create Custom Engagement Attribute

Edit Custom Engagement Attribute

VRM Engagement Groups

Create Custom Engagement Attribute Groups

Create Custom Engagement Attribute Groups

These permissions have been granted to the following system roles:

IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the VRM Engagement Groups permission or the Create Custom Engagement Attribute Groups permission.

Edit Engagement attribute groups

View Engagement attribute groups

Delete Engagement attribute groups

VRM Engagement

Engagement Workflow Automate Stage Progression

Engagement Workflow Automate Stage Progression

These permissions have been granted to the following system roles:

IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the VRM Engagement permission or the Engagement Workflow Automate Stage Progression permission.

Edit Engagement workflow rules

View Engagement workflow rules

Delete Engagement workflow rules

VRM Engagement PDF Reports

VRM Engagement PDF Reports

These permissions have been granted to the following system roles:

IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the VRM Engagement PDF Reports permission.

Create Engagement PDF reports

Export Engagement PDF Reports

Admin saved views for contracts list

Admin saved views for contracts list

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Admin saved views for contracts list permission.

Edit Admin saved views for contracts list

Delete Admin saved views for contracts list

Manage engagement public views

Manage engagement public views

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Manage engagement public views permission.

Edit engagement public views

Delete engagement public views

Manage vendor engagement public views

Manage vendor engagement public views

These permissions have been granted to the following system roles:

Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Manage vendor engagement public views permission.

Edit vendor engagement public views

Delete vendor engagement public views

Engagement attribute groups

Create Engagement attribute groups

Engagement Workflow automate stage progression

Engagement workflow rules create

Create engagement assets

The Create engagement assets permission has been added and now controls users' ability to create engagement assets.

This permission has been granted to the following system roles:

IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

This permission has been granted to custom roles that were previously assigned the Create engagements permission.

View engagement assets

The View engagement assets permission has been added and now controls users' ability to view engagement assets.

This permission has been granted to the following system roles:

IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

This permission has been granted to custom roles that were previously assigned the VRM engagements permission.

View engagement workflows

Create engagement workflows

These permissions have been granted to the following system roles:

IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Vendor engagement workflows permission or the View engagement workflows permission.

View engagement workflow setup

Edit engagement workflows

Delete engagement workflows

Publish engagement workflows

Add Comment for Engagement Task

The Add Comment for Engagement Task permission has been added and now controls users' ability to add comments to engagement tasks.

This permission has been granted to the following system roles:

IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

This permission has been granted to custom roles that were previously assigned the Engagement View Tasks permission.

Add Attachment for Engagement Task

The Add Attachment for Engagement Task permission has been added and now controls users' ability to add attachments to engagement tasks.

This permission has been granted to the following system roles:

IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

This permission has been granted to custom roles that were previously assigned the Engagement View Tasks permission.

Delete Attachment for Engagement Task

The Delete Attachment for Engagement Task permission has been added and now controls users' ability to delete attachments from engagement tasks.

This permission has been granted to the following system roles:

IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

This permission has been granted to custom roles that were previously assigned the Engagement View Tasks permission.

Export Attribute Manager

Export Engagement Attributes

These permissions have been granted to the following system roles:

IT Risk Manager, Privacy Officer, Privacy Program Auditor, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the Export Attribute Manager permission.

Export Contract Attributes

Delete contract attachments

• When the Delete contract attachments permission is added to the custom role, the View contract attachments permission will be automatically added.

Edit contract attachments

• When the Edit contract attachments permission is added to the custom role, the View contract attachments permission will be automatically added.

Delete and unlink risks on engagements

• When the Delete and unlink risks on engagements permission is added to the custom role, the View engagement risks permission will be automatically added.

Create and edit engagement risks

• When the Create and edit engagement risks permission is added to the custom role, the View engagement risks permission will be automatically added.

Engagements full view

• When the Engagements full view permission is added to the custom role, the Engagements limited view permission will be automatically added.

Engagements Full View

The link between the Engagements Full View permission and the TPRM Engagement Edit permission has been removed.

Vendor basic fields view

The Vendor basic fields view and Vendor advanced fields view permissions have been added and now control users' ability to view basic attribute details for all vendors and view all attribute details for all vendors, respectively.

These permissions have been granted to the following system roles:

Compliance Manager, Data Mapping Automation Manager, Digital Policy Manager, Digital Policy Owner, Enterprise Policy Manager, Ethics Policy Manager, Ethics Policy Owner, Ethics Policy Restricted Owner, Exchange Manager, IT Risk Manager, Incident General User, Privacy Notice Author, Privacy Notice Manager, Privacy Officer, Privacy Program Auditor, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager, Vendorpedia Assessment Coordinator

These permissions have been granted to custom roles that were previously assigned the following full set of permissions:

• Third-Party Risk Management

• Third-Party Risk Exchange

• View vendor details

• Vpconnect

• Data Mapping view vendors

Vendor advanced fields view

Link Assessments to Engagements

The Link Assessments to Engagements permission has been added and now controls users' ability to link assessments to engagements.

These permissions have been granted to the following system roles:

IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the VRM Link Assessments to Engagements permission.

Unlink Assessments from Engagements

The Unlink Assessments from Engagements permission has been added and now controls users' ability to unlink assessments from engagements.

Create Vendors

The Create Vendors permission has been added and now controls users' ability to create vendors.

This permission has been granted to system and custom roles that were previously assigned the following combination of permissions:

• Data Mapping Automation inventory VRM add

• TPRM engagement add

• Vendorpedia

• VP Exchange actions

• Request assessment

• Self Service Portal

Edit Vendors

The Edit Vendors permission has been added and now controls users' ability to edit vendors.

This permission has been granted to system and custom roles that were previously assigned the following combination of permissions:

• Data Mapping Automation inventory VRM edit

• Add contracts from contracts list view

• Engagements limited view

• Engagements full view

• Self Service Portal

• Vendor document tab

VRM Contract Bulk Import

The VRM Contract Bulk Import permission has been merged into the Add Contracts from Contracts List View permission.

Engagement Comments View

The Engagement Comments View permission has been removed from the Project Owner system role.

Engagements Personal Data Tab View

The Engagements Personal Data Tab View permission has been removed from the Project Owner system role.

Engagements Related Tab View

The Engagements Related Tab View permission has been removed from the Project Owner system role.

Engagements View Relationships

The Engagements View Relationships permission has been removed from the Project Owner system role.

Engagements Add and Edit Relationships

The Engagements Add and Edit Relationships permission has been removed from the Project Owner system role.

Engagements Remove Relationships

The Engagements Remove Relationships permission has been removed from the Project Owner system role.

Engagements Activity Tab View

The Engagements Activity Tab View permission has been removed from the Project Owner system role.

Engagements Activity View

The Engagements Activity View permission has been removed from the Project Owner system role.

VRM Engagements

The VRM Engagements permission has been removed from the Project Owner system role.

Vendor Document Tab

The Vendor Document Tab permission has been removed from the Project Owner system role.

Contracts Linked to Vendors View

The Contracts Linked to Vendors View permission has been removed from the Project Owner system role.

VRM Contract Multiple Attachments

The VRM Contract Multiple Attachments permission has been removed from the platform. There is no impact to system or custom roles.

VRM Engagements

Engagements Limited View

These permissions have been granted to the following system roles:

IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

These permissions have been granted to custom roles that were previously assigned the VRM Engagements permission.

Engagements Full View

VRM Bulk Create Engagements

The VRM Bulk Create Engagements permission was merged into the TPRM Engagement Add permission.

VRM Bulk Update Engagements

The VRM Bulk Update Engagements permission was merged into the TPRM Engagement Edit permission.

Edit contract assignments

• When the Edit contract assignments permission is added to the custom role, the View contract assignments permission will be automatically added.

View contract assignments

• When the View contract assignments permission is removed from the custom role, the Edit contract assignments permission will be automatically removed.

Edit engagement assignments

• When the Edit engagement assignments permission is added to the custom role, the View engagement assignments permission will be automatically added.

View engagement assignments

• When the View engagement assignments permission is removed from the custom role, the Edit engagement assignments permission will be automatically removed.

View engagement risks

• When the View engagement risks permission is removed from the custom role, the following permissions will be automatically removed:

  • Delete and Unlink Risks on Engagements

  • Create and Edit Engagement Risks

Delete attachment for engagement task

• When the Delete attachment for engagement task permission is added to the custom role, the Engagement view tasks permission is automatically added.

Engagements Limited View

• When the Engagements Limited View permission is removed from the custom role, the following permissions will be automatically removed:

  • TPRM engagement add

  • TPRM engagement edit

  • Delete vendor engagements

  • Engagements Activity Tab View

  • TPRM Engagement Export

  • Engagement Change Status

  • Engagements Full View

  • Reassign Engagement

Delete vendor engagements

The Delete vendor engagements permission has been removed from the Privacy Program Auditor system role.

VRM bulk create engagements

The VRM bulk create engagements permission has been removed from the Privacy Program Auditor system role.

VRM bulk update engagements

The VRM bulk update engagements permission has been removed from the Privacy Program Auditor system role.

View engagement contracts

The View engagement contracts permission has been added and now controls users’ ability to view engagement contracts.

This permission has been granted to the following system roles:

IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

This permission has been granted to custom roles that were previously assigned the Engagement documents tab permission.

View vendor contracts

The View vendor contracts permission has been added and now controls users’ ability to view vendor contracts.

This permission has been granted to the following system roles:

IT Risk Manager, Privacy Officer, Project Viewer, Site Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, TPDD Admin, Tech Risk & Compliance Admin, Vendor Manager

This permission has been granted to custom roles that were previously assigned the Vendor document tab permission.

Create engagement attachments

The Create engagement attachments permission has been added and now controls users’ ability to create engagement attachments.

This permission has been granted to the following system roles:

IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

This permission has been granted to custom roles that were previously assigned the Edit engagement attachments permission.

Engagement risks tab

The Engagement risks tab permission has been removed from the platform. There is no impact to system or custom roles.

Create engagement certificates

The Create engagement certificates permission has been added and now controls users’ ability to create engagement certificates.

This permission has been granted to the following system roles:

IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

This permission has been granted to custom roles that were previously assigned the Add vendor certificate permission.

Edit engagement certificates

The Edit engagement certificates permission has been added and now controls users’ ability to edit engagement certificates.

This permission has been granted to the following system roles:

IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

This permission has been granted to custom roles that were previously assigned the Edit vendor certificate permission.

Delete engagement certificates

The Delete engagement certificates permission has been added and now controls users’ ability to delete engagement certificates.

This permission has been granted to the following system roles:

IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

This permission has been granted to custom roles that were previously assigned the Delete vendor certificate permission.

Edit engagement tasks

The Edit engagement tasks permission has been added and now controls users’ ability to edit engagement tasks.

This permission has been granted to the following system roles:

IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager

This permission has been granted to custom roles that were previously assigned the Engagement add tasks permission.

VRM scheduler

The VRM scheduler permission has been removed from the platform. There is no impact to system or custom roles.

Vendor workflows

The Vendor workflows permission has been removed from the platform. There is no impact to system or custom roles.

Vendor risk

The Vendor risk permission has been removed from the platform. There is no impact to system or custom roles.