Issues Management Roles & Permissions

Important:

Issues Management is a platform capability and is not sold as a standalone product. All existing roles were updated to accommodate issues instead of creating net new roles.

Issues Owner & Approver Attributes

The Issues Management product comes with two system user attributes:

Issue Owners: Responsible for remediating issues.
Issue Approvers: Responsible for reviewing the remediation work completed by Issue Owners. The ability to be an approver is governed by the Can Be Issue Approver permission, which is granted to manager roles and Site Admins. You can create a custom role and add this permission as needed for approver assignments.

Issues Management Permissions

Access to issues is based on the permissions granted to existing roles within the OneTrust application. Refer to the table below for more information on the permissions each role can access.


Feature	Project Owner & Policy Owner Role Access	IT Risk, Compliance & Policy Manager Role Access	Tech Risk & Compliance Admin Role Access
Issues Register	View issues they are assigned to.	Create issues View issues they created or are assigned to as the Issue Owner or Approver Export issues they created or are assign to as the Issue Owner or Approver	Create, view, and export all issues.
Issue Details Tab	View-only attribute access.	View and edit all issues attributes.	View and edit all issues attributes.
Issue Workflows	Ability to advance workflow stages that are not configured as an approval stage.	View, configure, and advance issues workflows.	View, configure, and advance issues workflows.
Issue Documents Tab	Add and download documents to issues they are assigned to as the Issue Owner or Issue Approver.	Add, download, and delete documents.	Add, download, and delete documents.
Issue Tasks Tab	View and edit the status of issue tasks in which they are assigned. This role can also attach documents to issue tasks in which they are assigned.	Create, view, and edit the status of issue tasks.	Create, view, and edit the status of issue tasks.
Issue Related Tab	View-only access to related objects. If they have access to the related object, a hyperlink to the object will appear.	View and create issue relationships.	View and create issue relationships.
Issue Comments Tab	View, add, edit, and delete the comments they've added.	View, add, edit, and delete the comments they've added.	View, add, edit, and delete the comments they've added.

Issues Management Roles

For a complete list of permissions by role navigate to Global Settings > Roles and export the role.