Understanding Linked Permissions

Previously, all OneTrust permissions existed independently of each other, which caused challenges in knowing which permissions were required in order for a user to interact with a specific object. To move towards simplifying this experience, permissions related to a specific object will now be linked to add clarity to any dependencies that exist. For instance, an Edit permission for an object would be dependent on the respective View permission for that object to ensure that users can access the content that they are editing. With linked permissions, this means that if a user was granted the Edit Roles permission for example, they would then automatically be granted the View Roles permission as well.

When configuring a custom role, you will select permissions to grant to that role in the same manner as before. However, if a permission you selected is linked to another permission, those linked permission(s) will also be added and visible for you to review on the Role Summary during role configuration. The following permission link behavior is generally applied when adding permissions for objects in many scenarios:

• The Delete permission of an object is linked to the Edit permission of the same object. This means:

  • If a Delete permission is granted, the corresponding Edit and View permissions will also be granted.

• The Create permission of an object is linked to the Edit permission of the same object. This means:

  • If a Create permission is granted, the corresponding Edit and View permissions will also be granted.

• The Edit permission of an object is linked to the View permission of the same object. This means:

  • If a Edit permission is granted, the corresponding View permission will also be granted.

When updating permissions for an existing custom role, you will modify the permissions granted to that role in the same manner as before. However, if a permission you removed is linked to another permission, those linked permission(s) will also be removed and visible for you to review on the Role Summary during role configuration. The following permission link behavior is generally applied when removing permissions for objects in many scenarios:

• The Create permission of an object is linked to the Edit permission of the same object. This means:

  • If a Create permission is removed, the corresponding Edit permission will also be removed if previously configured.

• The Edit permission of an object is linked to the Delete permission of the same object. This means:

  • If a Edit permission is removed, the corresponding Delete permission will also be removed if previously configured.

• The View permission of an object is linked to the Create, Edit, and Delete permissions of the same object. This means:

  • If a View permission is removed, the corresponding Create, Edit, and Delete permissions will also be removed if previously configured.

You can view linked permissions when you are creating a new custom role or editing an existing custom role. If you select a permission that is linked to another permission, the View linked permissions link will appear within the Permissions Assigned section of the Role Summary. You can click the link to access the Linked Permissions modal, which will list the linked permissions that were added or removed based on the permissions you configured for the role.

The following responses are supported solutions to frequently asked questions (FAQ) on linked permissions. The OneTrust team continuously monitors these inquiries and will make additional FAQ available as they are identified.