Auditing Access Changes with Attribute-Based Access Control (ABAC)

Important:

The Attribute-Based Access Control (ABAC) Phase 1: Foundations feature is under Public Preview. Please contact OneTrust Support to request early access.

Attribute-Based Access Control (ABAC) provides visibility into changes made to record access and assignment configurations. Administrators can use audit history to review record-level access activities, such as sharing records, modifying user access, or changing record ownership, and assignment-level activities, such as activating assignments, updating permissions, or deleting assignments. Audit history helps administrators understand what changed, who made the change, and when the change occurred.

Note:

Audit history for ABAC records and assignments will be captured within the OneTrust Activity Log, which delivers a unified, real-time view of user and system audit events across the OneTrust Platform. For more information, see OneTrust Activity Log.

To view record access audit history

ABAC Phase 1: Foundations is currently in Public Preview. During this feature stage, administrators can review access-related activity through Manage Access on individual records and the Activity Log in Global Settings. Additional ABAC auditing guidance will be added when the feature reaches General Availability.
Important: Contact OneTrust Support for assistance enabling these features.

To view assignment audit history

You can review assignment audit history to understand how an assignment's configuration has changed over time, including assignment creation, activation, deactivation, deletion, and updates to permissions and settings. Audit entries identify the user who performed the action, the action that occurred, and the date and time of the change, helping administrators validate assignment changes and maintain consistency across access-control configurations.

  1. Click the gear icon in the upper right-hand corner to access Global Settings.
  2. On the Global Settings menu, select User management > Assignments. The Assignments screen appears.


  3. Select the tab corresponding to the solution, and click the object associated with the assignment audit history you want to review. The corresponding object screen appears with the list of assignments configured for that object.

  4. Click the assignment you want to review, and click the Activity tab.


  5. Review the recorded assignment configuration changes and associated audit details as needed.

Additional Resources

For a complete list of ABAC resources, see the Attribute-Based Access Control (ABAC) User Guide, which includes foundational concepts, implementation guidance, and solution-specific documentation.

To continue configuring and managing ABAC, reference the following procedural configuration articles: