Settings & Administration Terminology Guide

The following terminology is used throughout OneTrust Settings & Administration.


Term	Definition
API Keys	An opaque access token that is used to authorize requests to access resources in order to integrate the OneTrust application with external third-party applications.
Account	A unique instance of the OneTrust application set up on a respective environment. The term "account" is often interchangeably used with the term "tenant".
Alert Center	The central hub for notifications and tasks created throughout the application.
Assignment	An administrator-configured permission set that determines what assigned or shared users can do on a record.
Attribute-Based Access Control (ABAC)	An access-control model that provides granular, record-level control over which records users can access and what actions they can perform.
Attribute	A record field or value that can be used to automatically grant access based on ownership, responsibility, or another user relationship.
Client Credentials	A combination of a client ID and client secret that is used to authenticate an application rather than a user, generate an access token, and authorize requests to access resources in order to integrate the OneTrust application with external third-party applications.
Developer Portal	A community resource that offers technical information about APIs and SDKs that you can leverage to seamlessly integrate external systems and streamline the flow of data with the OneTrust application.
Environment	The application URL in which your OneTrust account is hosted. OneTrust accounts can be hosted in one of two ways: 1) in a shared environment with cloud hosting provided by OneTrust or 2) in a dedicated cloud environment managed by OneTrust. Shared environment: A multi-tenant cloud environment with dedicated tenant databases with cloud hosting provided by OneTrust. Dedicated environment: A single-tenant cloud environment with dedicated cloud hosting for an annual fee.
Global Header	The toolbar located at the top of the OneTrust application that is used to access notifications, Global Settings, User Preferences, and more.
Global Settings	The area of the application that contains settings that can be configured per organization or configured globally for the account. Global Settings also contains a variety of resources that can help you stay informed on updates to the application, expand your knowledge, and connect for support.
Least-Privileged Access	The principle of granting users only the access necessary to perform their responsibilities.
Main Navigation Menu	The menu located on the left side of the OneTrust application that is used to launch products to which a user has access.
Notifications	Messages that alert you of activity within the application, such as notifying you that a list or report that you have exported is now complete or that you have been assigned a task or subtask.
Object	A general element within the OneTrust Platform, such as an assessment, risk, AI agent, or vendor record.
Open Source Software (OSS)	Open-source software (OSS) is computer software with its source code made available with a license in which the copyright holder provides the rights to study, change, and distribute the software to anyone and for any purpose.
Organizational Hierarchy	The structure of organizations that define users' access to various objects within the application.
Record	A specific instance of an object.
Role-Based Access Control (RBAC)	An access-control model that provides broad access and permissions through roles.
Role	A collection of permissions that are assigned to users based on their job functions or responsibilities within an organization.
Sandbox Account	A non-production account in the same environment as the production account with restricted use limits.
Sharing	A mechanism that grants one or more users access to a specific record.
Simple Mail Transfer Protocol (SMTP)	An Internet standard protocol used for sending and receiving email messages between servers. Companies wanting full control over emails coming from the OneTrust application can configure a custom SMTP email account to send emails from the application directly to the customer's email server.
Single Sign-On (SSO)	A method that allows users to log in to multiple applications and websites using one set of credentials.
System for Cross-Domain Identity Management (SCIM)	An open specification to help facilitate the automated management of user identities and groups in cloud applications using RESTful APIs.
Tasks	Action items created on records across the application to which users can be configured as an Assignee or Collaborator.
Two-Step Verification	A method of multi-factor authentication (MFA) that requires users to provide two forms of identification to verify a user's identity.
User Group	A collection of users who share similar access needs based on their job functions.
User	An individual who interacts with the OneTrust application and is assigned to roles and organizations to accommodate the specific permissions needed to perform their respective job functions.
myOneTrust	The official home for online community and knowledge base for OneTrust users, partners, and experts.
UAT	A non-production account in a different environment than the production account with the same use limits as production.