Permissions Release Notes: Data Mapping Automation (Summer '26 - Current)

Shared Vendor Permission Changes with Data Mapping Automation

Vendor permissions for the Assessments, Certificates, Comments, Controls, Issues, Personal data, Risks, and Tasks tabs belong to the Data Mapping Automation permission group. Some of these permissions, such as Create, now also grant the respective View permission, and removing a View permission removes the permissions that depend on it. For details on Third-Party Risk Management, see Permissions Release Notes: Data Mapping Automation (Summer '26 - Current).

Linked Permissions

The following permissions have been linked and will be automatically added or removed from the custom role during configuration as defined below. For more information, see Understanding Linked Permissions.

Permission name	Explanation of changes
Create asset comments	When the Create asset comments permission is added to the custom role, the View asset comments permission will be automatically added.
View asset comments	When the View asset comments permission is removed from the custom role, the Create asset comments permission will be automatically removed.
View asset controls	When any of the permissions listed below are added to the custom role, the View asset controls permission will be automatically added: Create asset controls Link assets to controls Unlink assets from controls When the View asset controls permission is removed from the custom role the following permissions will be automatically removed: Create asset controls Link assets to controls Unlink assets from controls
View asset incidents	When any of the permissions listed below are added to the custom role, the View asset incidents permission will be automatically added: Link assets to incidents Unlink assets from incidents When the View asset incidents permission is removed from the custom role the following permissions will be automatically removed: Link assets to incidents Unlink assets from incidents
View asset issues	When any of the permissions listed below are added to the custom role, the View asset issues permission will be automatically added: Create asset issues Link issues to assets When the View asset issues permission is removed from the custom role the following permissions will be automatically removed: Create asset issues Link issues to assets
View asset personal data	When any of the permissions listed below are added to the custom role, the View asset personal data permission will be automatically added: Delete asset personal data Edit asset personal data When the View asset personal data permission is removed from the custom role the following permissions will be automatically removed: Delete asset personal data Edit asset personal data
View personal data	When the View asset personal data permission is added to the custom role, the View personal data permission will be automatically added.
View asset policies	When any of the permissions listed below are added to the custom role, the View asset policies permission will be automatically added: Link asset policies Unlink asset policies When the View asset policies permission is removed from the custom role the following permissions will be automatically removed: Link asset policies Unlink asset policies
View asset privacy notices	When any of the permissions listed below are added to the custom role, the View asset privacy notices permission will be automatically added: Link asset privacy notices Unlink asset privacy notices When the View asset privacy notices permission is removed from the custom role the following permissions will be automatically removed: Link asset privacy notices Unlink asset privacy notices
View asset procedures	When any of the permissions listed below are added to the custom role, the View asset procedures permission will be automatically added: Link asset procedures Unlink asset procedures When the View asset procedures permission is removed from the custom role the following permissions will be automatically removed: Link asset procedures Unlink asset procedures
Edit personal data related objects for assets	When the Edit personal data related objects for assets permission is added to the custom role, the View personal data related objects for assets permission will be automatically added. When the View personal data related objects for assets permission is removed from the custom role, the Edit personal data related objects for assets will be automatically removed.
View asset risks	When any of the permissions listed below are added to the custom role, the View asset risks permission will be automatically added: Create asset risks Unlink asset risks When the View asset risks permission is removed from the custom role the following permissions will be automatically removed: Create asset risks Unlink asset risks
View asset standards	When any of the permissions listed below are added to the custom role, the View asset standards permission will be automatically added: Link asset standards Unlink asset standards When the View asset standards permission is removed from the custom role the following permissions will be automatically removed: Link asset standards Unlink asset standards
View asset tasks	When any of the permissions listed below are added to the custom role, the View asset tasks permission will be automatically added: Create task attachments for assets Delete task attachments for assets Create task comments for assets Create asset tasks Delete asset tasks Edit asset tasks When the View asset tasks permission is removed from the custom role the following permissions will be automatically removed: Create task attachments for assets Delete task attachments for assets Create task comments for assets Create asset tasks Delete asset tasks Edit asset tasks
Delete asset tasks	When the Delete asset tasks permission is added to the custom role, the Delete task attachments for assets permission will be automatically added.
Create entity comments	When the Create entity comments permission is added to the custom role, the View entity comments permission will be automatically added.
View entity comments	When the View entity comments permission is removed from the custom role, the Create entity comments permission will be automatically added.
View entity controls	When any of the permissions listed below are added to the custom role, the View entity controls permission will be automatically added: Create entity controls Link entities to controls Unlink entities from controls When the View entity controls permission is removed from the custom role the following permissions will be automatically removed: Create entity controls Link entities to controls Unlink entities from controls
View entity incidents	When any of the permissions listed below are added to the custom role, the View entity incidents permission will be automatically added: Link entities to incidents Unlink entities from incidents When the View entity incidents permission is removed from the custom role the following permissions will be automatically removed: Link entities to incidents Unlink entities from incidents
View entity issues	When any of the permissions listed below are added to the custom role, the View entity issues permission will be automatically added: Create entity issues Link issues to entities When the View entity issues permission is removed from the custom role the following permissions will be automatically removed: Create entity issues Link issues to entities
View entity personal data	When any of the permissions listed below are added to the custom role, the View entity personal data permission will be automatically added: Delete entity personal data Edit entity personal data When the View entity personal data permission is added to the custom role, the View personal data permission is automatically added. When the View entity personal data permission is removed from the custom role the following permissions will be automatically removed: Delete entity personal data Edit entity personal data
View entity policies	When any of the permissions listed below are added to the custom role, the View entity policies permission will be automatically added: Link entity policies Unlink entity policies When the View entity policies permission is removed from the custom role the following permissions will be automatically removed: Link entity policies Unlink entity policies
View entity privacy notices	When any of the permissions listed below are added to the custom role, the View entity privacy notices permission will be automatically added: Link entity privacy notices Unlink entity privacy notices When the View entity privacy notices permission is removed from the custom role the following permissions will be automatically removed: Link entity privacy notices Unlink entity privacy notices
View entity procedures	When any of the permissions listed below are added to the custom role, the View entity procedures permission will be automatically added: Link entity procedures Unlink entity procedures When the View entity procedures permission is removed from the custom role the following permissions will be automatically removed: Link entity procedures Unlink entity procedures
Edit personal data related objects for entities	When the Edit personal data related objects for entities permission is added to the custom role, the View personal data related objects for entities will be automatically added.
View personal data related objects for entities	When the View personal data related objects for entities permission is removed from the custom role, the Edit personal data related objects for entities permission will be automatically removed.
View entity risks	When any of the permissions listed below are added to the custom role, the View entity risks permission will be automatically added: Create entity risks Unlink entity risks When the View entity risks permission is removed from the custom role the following permissions will be automatically removed: Create entity risks Unlink entity risks
Share entities	When the Share entities permission is removed from the custom role, the Remove shared entities permission will be automatically removed.
Remove shared entities	When the Remove shared entities permission is added to the custom role, the following permissions will be automatically added: Share entities View entity access
View entity access	When the View entity access permission is removed from the custom role, the Remove shared entities permission will be automatically removed.
View entity standards	When any of the permissions listed below are added to the custom role, the View entity standards permission will be automatically added: Link entity standards Unlink entity standards When the View entity standards permission is removed from the custom role the following permissions will be automatically removed: Link entity standards Unlink entity standards
View entity tasks	When any of the permissions listed below are added to the custom role, the View entity tasks permission will be automatically added: Create task attachments for entities Delete task attachments for entities Create task comments for entities Create entity tasks Delete entity tasks Edit entity tasks When the View entity tasks permission is removed from the custom role the following permissions will be automatically removed: Create task attachments for entities Delete task attachments for entities Create task comments for entities Create entity tasks Delete entity tasks Edit entity tasks
Delete entity tasks	When the Delete entity tasks permission is added to the custom role, the Delete task attachments for entities permission will be automatically added.
Create personal data	When the Create personal data permission is added to the custom role, the View personal data permission will be automatically added.
Delete personal data	When the Delete personal data permissions is added to the custom role, the following permissions will be automatically added: Edit personal data View personal data
Edit personal data	When the Edit personal data permission is added to the custom role, the View personal data permission will be automatically added.
View personal data incidents	When any of the permissions listed below are added to the custom role, the View personal data incidents permission will be automatically added: Link incidents to personal data Unlink personal data from incidents When the View personal data incidents permission is removed from the custom role, the following permissions will be automatically removed: Link incidents to personal data Unlink personal data from incidents
View personal data	When the View personal data permission is removed from the custom role, the following permissions will be automatically removed: Create personal data Edit personal data Delete personal data
Create processing activity comments	When the Create processing activity comments permission is added to the custom role, the View processing activity comments will be automatically added.
View processing activity comments	When the View processing activity comments permission is removed from the custom role, the Create processing activity comments will be automatically removed.
View processing activity controls	When any of the permissions listed below are added to the custom role, the View processing activity controls permission will be automatically added: Create processing activity controls Link processing activities to controls Unlink processing activities from controls When the View processing activity controls permission is removed from the custom role, the following permissions will be automatically removed: Create processing activity controls Link processing activities to controls Unlink processing activities from controls
View processing activity incidents	When any of the permissions listed below are added to the custom role, the View processing activity incidents permission will be automatically added: Link processing activities to incidents Unlink processing activities from incidents When the View processing activity incidents permission is removed from the custom role, the following permissions will be automatically removed: Link processing activities to incidents Unlink processing activities from incidents
View processing activity issues	When any of the permissions listed below are added to the custom role, the View processing activity issues permission will be automatically added: Create processing activity issues Link issues to processing activities When the View processing activity issues permission is removed from the custom role, the following permissions will be automatically removed: Create processing activity issues Link issues to processing activities
Link issues to processing activities	When any of the permissions listed below are added to the custom role, the Link issues to processing activities permission will be automatically added: Delete processing activity personal data Edit processing activity personal data When the Link issues to processing activities permission is removed from the custom role, the following permissions will be automatically removed: Delete processing activity personal data Edit processing activity personal data
View processing activity policies	When any of the permissions listed below are added to the custom role, the View processing activity policies permission will be automatically added: Link processing activity policies Unlink processing activity policies When the View processing activity policies permission is removed from the custom role, the following permissions will be automatically removed: Link processing activity policies Unlink processing activity policies
View processing activity privacy notices	When any of the permissions listed below are added to the custom role, the View processing activity privacy notices permission will be automatically added: Link processing activity privacy notices Unlink processing activity privacy notices When the View processing activity privacy notices permission is removed from the custom role, the following permissions will be automatically removed: Link processing activity privacy notices Unlink processing activity privacy notice
View processing activity procedures	When any of the permissions listed below are added to the custom role, the View processing activity procedures permission will be automatically added: Link processing activity procedures Unlink processing activity procedures When the View processing activity procedures permission is removed from the custom role, the following permissions will be automatically removed: Link processing activity procedures Unlink processing activity procedures
Edit personal data related objects for processing activities	When the Edit personal data related objects for processing activities permission is added to the custom role, the View personal data related objects for processing activities permission will be automatically added.
View personal data related objects for processing activities	When the View personal data related objects for processing activities permission is removed from the custom role, the Edit personal data related objects for processing activities permission is automatically removed.
View processing activity risks	When any of the permissions listed below are added to the custom role, the View processing activity risks permission will be automatically added: Create processing activity risks Unlink processing activity risks When the View processing activity risks permission is removed from the custom role, the following permissions will be automatically removed: Create processing activity risks Unlink processing activity risks
View processing activity standards	When any of the permissions listed below are added to the custom role, the View processing activity standards permission will be automatically added: Link processing activity standards Unlink processing activity standards When the View processing activity standards permission is removed from the custom role, the following permissions will be automatically removed: Link processing activity standards Unlink processing activity standards
View processing activity tasks	When any of the permissions listed below are added to the custom role, the View processing activity tasks permission will be automatically added: Create task attachments for processing activities Delete task attachments for processing activities Create task comments for processing activities Create processing activity tasks Delete processing activity tasks Edit processing activity tasks When the View processing activity tasks permission is removed from the custom role, the following permissions will be automatically removed: Create task attachments for processing activities Delete task attachments for processing activities Create task comments for processing activities Create processing activity tasks Delete processing activity tasks Edit processing activity tasks
View assets saved views	When any of the permissions listed below are added to the custom role, the View assets saved views permission will be automatically added: Create asset saved views Delete asset saved views Edit asset saved views When the View assets saved views permission is removed from the custom role, the following permissions will be automatically removed: Create asset saved views Delete asset saved views Edit asset saved views
View entity saved views	When any of the permissions listed below are added to the custom role, the View entity saved views permission will be automatically added: Create entity saved views Delete entity saved views Edit entity saved views When the View entity saved views permission is removed from the custom role, the following permissions will be automatically removed: Create entity saved views Delete entity saved views Edit entity saved views
View processing activity saved views	When any of the permissions listed below are added to the custom role, the View processing activity saved views permission will be automatically added: Create processing activity saved views Delete processing activity saved views Edit processing activity saved views When the View processing activity saved views permission is removed from the custom role, the following permissions will be automatically removed: Create processing activity saved views Delete processing activity saved views Edit processing activity saved views
View vendor saved views	When any of the permissions listed below are added to the custom role, the View vendor saved views permission will be automatically added: Create vendor saved views Delete vendor saved views Edit vendor saved views When the View vendor saved views permission is removed from the custom role, the following permissions will be automatically removed: Create vendor saved views Delete vendor saved views Edit vendor saved views
Create vendor assessments	When the Create vendor assessments permission is added to the custom role, the View vendor assessments permission will be automatically added.
View vendor assessments	When the View vendor assessments permission is removed from the custom role, the following permissions will be automatically removed: Create vendor assessments Link vendors to assessments Unlink vendors from assessments
Create vendor certificates	When the Create vendor certificates permission is added to the custom role, the View vendor certificates permission will be automatically added.
Delete vendor certificates	When the Delete vendor certificates permission is added to the custom role, the following permissions will be automatically added: Edit vendor certificates View vendor certificates
Edit vendor certificates	When the Edit vendor certificates permission is added to the custom role, the View vendor certificates is automatically added.
View vendor certificates	When the View vendor certificates permission is removed from the custom role, the following permissions will be automatically removed: Create vendor certificates Edit vendor certificates Delete vendor certificates
Create vendor comments	When the Create vendor comments permission is added to the custom role, the View vendor comments permission will be automatically added.
View vendor comments	When the View vendor comments permission is removed from the custom role, the Create vendor comments permission will be automatically removed.
View vendor controls	When any of the permissions listed below are added to the custom role, the View vendor controls permission will be automatically added: Create vendor controls Link vendors to controls Unlink vendors from controls When the View vendor controls permission is removed from the custom role, the following permissions will be automatically removed: Create vendor controls Link vendors to controls Unlink vendors from controls
View vendor incidents	When any of the permissions listed below are added to the custom role, the View vendor incidents permission will be automatically added: Link vendors to incidents Unlink vendors from incidents When the View vendor incidents permission is removed from the custom role, the following permissions will be automatically removed: Link vendors to incidents Unlink vendors from incidents
View vendor issues	When any of the permissions listed below are added to the custom role, the View vendor issues permission will be automatically added: Create vendor issues Link issues to vendors When the View vendor incidents permission is removed from the custom role, the following permissions will be automatically removed: Create vendor issues Link issues to vendors
Delete vendor personal data	When the Delete vendor personal data permission is added to the custom role, the following permissions will be automatically added: Edit vendor personal data View vendor personal data
Edit vendor personal data	When the Edit vendor personal data permission is added to the custom role, the View vendor personal data permission will be automatically added.
View vendor personal data	When the View vendor personal data permission is added to the custom role, the View personal data permission will be automatically added. When the View vendor personal data permission is removed from the custom role, the following permissions will be automatically removed: Edit vendor personal data Delete vendor personal data
View vendor policies	When any of the permissions listed below are added to the custom role, the View vendor policies permission will be automatically added: Link vendor policies Unlink vendor policies When the View vendor policies permission is removed from the custom role, the following permissions will be automatically removed: Link vendor policies Unlink vendor policies
View vendor privacy notices	When any of the permissions listed below are added to the custom role, the View vendor privacy notices permission will be automatically added: Link vendor privacy notices Unlink vendor privacy notices When the View vendor privacy notices permission is removed from the custom role, the following permissions will be automatically removed: Link vendor privacy notices Unlink vendor privacy notices
View vendor procedures	When any of the permissions listed below are added to the custom role, the View vendor procedures permission will be automatically added: Link vendor procedures Unlink vendor procedures When the View vendor procedures permission is removed from the custom role, the following permissions will be automatically removed: Link vendor procedures Unlink vendor procedures
Edit personal data related objects for vendors	When the Edit personal data related objects for vendors permission is added to the custom role, the View personal data related objects for vendors permission will be automatically added.
View personal data related objects for vendors	When the View personal data related objects for vendors permission is removed from the custom role, the Edit personal data related objects for vendors permission will be automatically removed.
View vendor risks	When any of the permissions listed below are added to the custom role, the View vendor risks permission will be automatically added: Create vendor risks Unlink vendor risks When the View vendor risks permission is removed from the custom role, the following permissions will be automatically removed: Create vendor risks Unlink vendor risks
View vendor standards	When any of the permissions listed below are added to the custom role, the View vendor standards permission will be automatically added: Link vendor standards Unlink vendor standards When the View vendor standards permission is removed from the custom role, the following permissions will be automatically removed: Link vendor standards Unlink vendor standards
View vendor tasks	When any of the permissions listed below are added to the custom role, the View vendor tasks permission will be automatically added: Create task attachments for vendors Delete task attachments for vendors Create task comments for vendors Create vendor tasks When the View vendor tasks permission is removed from the custom role, the following permissions will be automatically removed: Create task attachments for vendors Delete task attachments for vendors Create task comments for vendors Create vendor tasks Delete vendor tasks Edit vendor tasks
Delete vendor tasks	When the Delete vendor tasks permission is added to the custom role, the following permissions will be automatically added: Edit vendor tasks View vendor tasks Delete task attachments for vendors
Edit vendor tasks	When the Edit vendor tasks permission is added to the custom role, the View vendor tasks permission will be automatically added.
View setup for vendor workflows	When any of the permissions listed below are added to the custom role, the View setup for vendor workflows permission will be automatically added: Create vendor workflows Delete vendor workflows Edit vendor workflows When the View setup for vendor workflows permission is removed from the custom role, the following permissions will be automatically removed: Create vendor workflows Delete vendor workflows Edit vendor workflows

Updated Permissions

The following permissions have been updated in the platform and have been granted to system and custom roles as defined below:

Permission name	Explanation of changes
View asset issues	The View asset issues permission has been added to the IT Risk Approver system role.
View entity issues	The View entity issues permission has been added to the IT Risk Approver system role.
View processing activity issues	The View processing activity issues permission has been added to the IT Risk Approver system role.
View vendor issues	The View vendor issues permission has been added to the IT Risk Approver system role.
View asset controls	The View asset controls permission has been added to the TPDD Admin system role.
View entity controls	The View entity controls permission has been added to the TPDD Admin system role.
View processing activity controls	The View processing activity controls permission has been added to the TPDD Admin system role.

New Permissions

The following permissions have been added to the platform and have been granted to system and custom roles as defined below:

Note: The permissions listed below belong to the Reports and dashboards permission group.

Permission name	Explanation of changes	System roles	Custom roles
View projects column report	The View project column report permission has been added and now controls users' ability to view project column reports.	These permissions have been granted to the following system roles: AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, Enterprise Policy Manager, ERM Manager, ESG Manager, Exchange Manager, Incidents Manager, IT Risk Manager, Policy Owner, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Vendor Manager	These permissions have been granted to custom roles that were previously assigned the Reports view and View advanced fields for projects permissions.
View projects PDF report	The View projects PDF report permission has been added and now controls users' ability to view project PDF reports.
Create/update/delete projects column report	The Create/update/delete projects column report permission has been added and now controls users' ability to create, update, and delete project column reports.	These permissions have been granted to the following system roles: AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, Enterprise Policy Manager, ERM Manager, ESG Manager, Exchange Manager, Incidents Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Vendor Manager	These permissions have been granted to custom roles that were previously assigned the Reports create and View advanced fields for projects permissions.
Create/update/delete projects PDF report	The Create/update/delete projects PDF report permission has been added and now controls users' ability to create, update, and delete project PDF reports.

Unlinked Permissions

The following permissions have been unlinked and will no longer be added or removed automatically from the custom role during configuration as defined below.

Note: The permissions listed below belong to the Custom object management permission group.

Permission name	Explanation of changes
Create project tasks	When the Create project tasks permission is added to the custom role, the Create project tasks attachments and Create project tasks comments permissions will no longer be automatically added. Each permission is now standalone and must be explicitly added to the custom role.
Edit project tasks	When the Edit project tasks permission is added to the custom role, the Create project tasks attachments and Create project tasks comments permissions will no longer be automatically added. Each permission is now standalone and must be explicitly added to the custom role.
Delete project tasks	When the Delete project tasks permission is added to the custom role, the Delete project tasks attachments permission will no longer be automatically added. Each permission is now standalone and must be explicitly added to the custom role.
Create project tasks attachments	When the Create project tasks attachments permission is added to the custom role, the View project tasks permission will no longer be automatically added. Each permission is now standalone and must be explicitly added to the custom role.
Delete project tasks attachments	When the Delete project tasks attachments permission is added to the custom role, the View project tasks permission will no longer be automatically added. Each permission is now standalone and must be explicitly added to the custom role.
Create project tasks comments	When the Create project tasks attachments permission is added to the custom role, the View project tasks permission will no longer be automatically added. Each permission is now standalone and must be explicitly added to the custom role.

Removed Permissions

The following permissions have been removed from the platform or removed from select system roles as defined below:

Permission name	Explanation of change
Assign project record admin	The Assign project record admin permission has been removed from the platform, which impacts the following system roles: AI Governance Manager, Data Mapping Automation Manager, Site Admin
Assign project editor	The Assign project editor permission has been removed from the platform, which impacts the following system roles: AI Governance Manager, Data Mapping Automation Manager, Site Admin
Assign project viewer	The Assign project viewer permission has been removed from the platform, which impacts the following system roles: AI Governance Manager, Data Mapping Automation Manager, Site Admin

New Permissions

The following permissions have been added to the platform and have been granted to system and custom roles as defined below:

Note:

The permissions listed below belong to the Custom object management permission group.

Permission name	Explanation of changes	System roles	Custom roles
View project saved views	The View project saved views permission has been added and now controls users’ ability to view saved views for projects.	These permissions have been granted to the following system roles: AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, Enterprise Policy Manager, ERM Manager, ESG Manager, Exchange Manager, Incidents Manager, IT Risk Approver, IT Risk Manager, Managed Service Provider, Policy Owner, Privacy Officer, Privacy Program Auditor, Site Admin, Tech Risk & Compliance Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Vendor Manager, Vendorpedia Assessment Coordinator	These permissions have been granted to custom roles that were previously assigned the View advanced fields for projects permission.
Create project saved views	The Create project saved views permission has been added and now controls users’ ability to create saved views for projects.
Edit project saved views	The Edit project saved views permission has been added and now controls users’ ability to edit saved views for projects.
Delete project saved views	The Delete project saved views permission has been added and now controls users’ ability to delete saved views for projects.
Create project tasks attachments	The Create project tasks attachments permission has been added and now controls users’ ability to create attachments for project tasks.	These permissions have been granted to the following system roles: AI Governance Manager, Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager	This permission has not been granted to custom roles by default but can be configured.
Delete project tasks attachments	The Delete project tasks attachments permission has been added and now controls users’ ability to delete attachments for project tasks.
Create project tasks comments	The Create project tasks comments permission has been added and now controls users’ ability to add comments to project tasks.

Linked Permissions

The following permissions have been linked and will be automatically added or removed from the custom role during configuration as defined below. For more information, see Understanding Linked Permissions.

Permission name	Explanation of changes
Delete asset certificates	When the Delete asset certificates permission is added to the custom role, the View certificates for assets permission will be automatically added.
Delete vendor certificates	When the Delete vendor certificates permission is added to the custom role, the View vendor certificates permission will be automatically added.
View advanced fields for projects	When the View advanced fields for projects permission is added to the custom role, the following permissions will be automatically added: View project saved views Create project saved views Edit project saved views Delete project saved views When the View advanced fields for projects permission is removed from the custom role, the View project saved views permission will be automatically removed.
Create issues	When the Create issues permission is added to the custom role, the following permissions will be automatically added: Create asset issues Create processing activity issues Create entity issues Create vendor issues When the Create issues permission is removed from the custom role, the following permissions will be automatically removed: Create asset issues Create processing activity issues Create entity issues Create vendor issues
Link to issues	When the Link to issues permission is added to the custom role, the following permissions will be automatically added: Link issues to assets Link issues to processing activities Link issues to entities Link issues to vendors When the Link to issues permission is removed from the custom role, the following permissions will be automatically removed: Link issues to assets Link issues to processing activities Link issues to entities Link issues to vendors
View project tasks	When the View project tasks permission is removed from the custom role, the following permissions will be automatically removed: Create project tasks attachments Delete project tasks attachments Create project tasks comments
Create project tasks	When the Create project tasks permission is added to the custom role, the following permissions will be automatically added: Create project tasks attachments Create project tasks comments When the Create project tasks permission is removed from the custom role, the following permissions will be automatically removed: Create project tasks attachments Create project tasks comments
Edit project tasks	When the Edit project tasks permission is added to the custom role, the following permissions will be automatically added: Create project tasks attachments Create project tasks comments
Delete project tasks	When the Delete project tasks permission is added to the custom role, the Delete project tasks attachments permission will be automatically added. When the Delete project tasks permission is removed from the custom role, the Delete project tasks attachments permission will be automatically removed.

Unlinked Permissions

The following permissions have been unlinked and will no longer be added or removed automatically from the custom role during configuration as defined below.

Permission name	Explanation of changes
Delete asset attachments	When the Delete asset attachments permission is added to the custom role, the Edit assest attachments permission will no longer be automatically added. Each permission is now standalone and must be explicitly added to the custom role.

Removed Permissions

The following permissions have been removed from the platform or removed from select system roles as defined below:

Permission name	Explanation of change
View projects	The View projects permission has been removed from the following system roles where it was incorrectly assigned: Assessments Manager, Compliance Manager, ERM Manager, Invited, Incidents Manager, IT Risk Approver, Project Respondent, Project Owner, Privacy Program Auditor, Data Access and Usage Manager, Data Governance Manager, Vendorpedia Assessment Coordinator
Projects object read	The Projects object read permission has been removed from the following system roles where it was incorrectly assigned: Assessments Manager, Compliance Manager, ERM Manager, Invited, Incidents Manager, IT Risk Approver, Project Respondent, Project Owner, Privacy Program Auditor, Data Access and Usage Manager, Data Governance Manager, Vendorpedia Assessment Coordinator
View advanced fields for projects	The View advanced fields for projects permission has been removed from the following system roles where it was incorrectly assigned: Assessments Manager, Compliance Manager, ERM Manager, Invited, Incidents Manager, IT Risk Approver, Project Respondent, Project Owner, Privacy Program Auditor, Data Access and Usage Manager, Data Governance Manager, Vendorpedia Assessment Coordinator
View basic fields for projects	The View basic fields for projects permission has been removed from the following system roles where it was incorrectly assigned: Assessments Manager, Compliance Manager, ERM Manager, Invited, Incidents Manager, IT Risk Approver, Project Respondent, Project Owner, Privacy Program Auditor, Data Access and Usage Manager, Data Governance Manager, Vendorpedia Assessment Coordinator
View project workflow	The View project workflow permission has been removed from the following system roles where it was incorrectly assigned: Assessments Manager, Compliance Manager, ERM Manager, Invited, Incidents Manager, IT Risk Approver, Project Respondent, Project Owner, Privacy Program Auditor, Data Access and Usage Manager, Data Governance Manager, Vendorpedia Assessment Coordinator
Create project risks	The Create project risks permission has been removed from the following system roles where it was incorrectly assigned: ERM Manager, Incidents Manager, IT Risk Approver, Data Access and Usage Manager, Data Governance Manager
View project risks	The View project risks permission has been removed from the following system roles where it was incorrectly assigned: ERM Manager, Incidents Manager, IT Risk Approver, Data Access and Usage Manager, Data Governance Manager
Custom object read	The Custom object read permission has been removed from the Invited system role where it was incorrectly assigned.
Assign asset editor	The Assign asset editor permission has been removed from the platform. There is no impact to system or custom roles.
Assign asset record admin	The Assign asset record admin permission has been removed from the platform. There is no impact to system or custom roles.
Assign asset viewer	The Assign asset viewer permission has been removed from the platform. There is no impact to system or custom roles.
Assign entity editor	The Assign entity editor permission has been removed from the platform. There is no impact to system or custom roles.
Assign entity record admin	The Assign entity record admin permission has been removed from the platform. There is no impact to system or custom roles.
Assign entity viewer	The Assign entity viewer permission has been removed from the platform. There is no impact to system or custom roles.
Assign processing activity editor	The Assign processing activity editor permission has been removed from the platform. There is no impact to system or custom roles.
Assign processing activity record admin	The Assign processing activity record admin permission has been removed from the platform. There is no impact to system or custom roles.
Assign processing activity viewer	The Assign processing activity viewer permission has been removed from the platform. There is no impact to system or custom roles.
Assign vendor editor	The Assign vendor editor permission has been removed from the platform. There is no impact to system or custom roles.
Assign vendor record admin	The Assign vendor record admin permission has been removed from the platform. There is no impact to system or custom roles.
Assign vendor viewer	The Assign vendor viewer permission has been removed from the platform. There is no impact to system or custom roles.

TheProjectsitem on the navigation menu will now be visible toData Mapping Automationusers by default regardless of whether they have permission to view that object. However, users will not be able to view information on theProjectsscreen without the necessary permissions.

New Permissions

The following permissions have been added to the platform and have been granted to system and custom roles as defined below:

Note:

The permissions listed below belong to the Custom object management permission group.

Permission name	Explanation of changes	System roles	Custom roles
View basic fields for projects	The View basic fields for projects permission has been added to give users the ability to view project fields.	This permission has been granted to the following system roles: AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, ERM Manager, ESG Manager, Enterprise Policy Manager, Exchange Manager, IT Risk Approver, IT Risk Manager, Incidents Manager, Invited, Managed Service Provider, Policy Owner, Privacy Officer, Privacy Program Auditor, Project Owner, Project Respondent, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager, Vendorpedia Assessment Coordinator	This permission has been granted to custom roles that were previously assigned the Projects object read or Projects view permissions.
View project workflow	The View project workflow permission has been added to give users the ability to view worksflows in projects.	This permission has been granted to the following system roles: AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, ERM Manager, ESG Manager, Enterprise Policy Manager, Exchange Manager, IT Risk Approver, IT Risk Manager, Incidents Manager, Invited, Managed Service Provider, Policy Owner, Privacy Officer, Privacy Program Auditor, Project Owner, Project Respondent, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager, Vendorpedia Assessment Coordinator	These permissions have been granted to custom roles that were previously assigned any of the following permissions: Projects object read Custom object read Custom object update
Edit project workflow	The Edit project workflow permission has been added to give users the ability to edit workflows in projects.	This permission has been granted to the following system roles: AI Governance Manager, Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager	This permission has been granted to custom roles that were previously assigned the Projects object update or Custom object update permissions.
View project risks	The View project risks permission has been added and now controls users’ ability to view project risks.	This permission has been granted to the following system roles: AI Governance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, ERM Manager, ESG Manager, Enterprise Policy Manager, Exchange Manager, IT Risk Approver, IT Risk Manager, Incidents Manager, Managed Service Provider, Policy Owner, Privacy Officer, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager	This permission has been granted to custom roles that were previously assigned the Projects object read or Object risk views permissions.
Create project risks	The Create project risks permission has been added and now controls users’ ability to create project risks.	This permission has been granted to the following system roles: AI Governance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, ERM Manager, ESG Manager, Enterprise Policy Manager, Exchange Manager, IT Risk Approver, IT Risk Manager, Incidents Manager, Managed Service Provider, Policy Owner, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager	This permission has been granted to custom roles that were previously assigned the Projects object add or Create risks permissions.
Unlink project risks	The Unlink project risks permission has been added and now controls users’ ability to unlink project risks.	This permission has been granted to the following system roles: AI Governance Manager, Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager	This permission has been granted to custom roles that were previously assigned the Projects object update or Object risks delete permissions.
Create project assessments	The Create project assessments permission has been added and now controls users’ ability to create project assessments.	These permissions have been granted to the following system roles: AI Governance Manager, Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager	This permission has been granted to custom roles that were previously assigned the Assessments launch permission.
View project assessments	The View project assessments permission has been added and now controls users' ability to view project assessments.		This permission has been granted to custom roles that were previously assigned the Object assessments view permission.
Unlink project assessments	The Unlink project assessments permission has been added and now controls users' ability to unlink project assessments.		This permission has been granted to custom roles that were previously assigned the Object assessments link permission.
Link project assessments	The Link project assessments permission has been added and now controls users' ability to link project assessments.		This permission has been granted to custom roles that were previously assigned the Object assessments link permission.
View project controls	The View project controls permission has been added and now controls users’ ability to view project controls.	These permissions have been granted to the following system roles: AI Governance Manager, Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager	This permission has been granted to custom roles that were previously assigned the Object controls view permission.
Create project controls	The Create project controls permission has been added and now controls users' ability to create project controls.		This permission has been granted to custom roles that were previously assigned the Custom object controls add permission.
Unlink project controls	The Unlink project controls permission has been added and now controls users' ability to unlink project controls.		This permission has been granted to custom roles that were previously assigned the Object controls delete permission.
Change project workflow stage	The Change project workflow stage permission has been added and now controls users' ability to change the workflow stage of a project.	This permission has been granted to the following system roles: AI Governance Manager, Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager	This permission has been granted to custom roles that were previously assigned the Object workflows advance permission.

Split Permissions

The following permissions have been split for more granular and precise access controls and have been granted to system and custom roles as defined below:

Note:

The permissions listed below belong to the Custom object management permission group.

Old permission name	New permission name	System roles	Custom roles
Projects object read	View project activity	This permission has been granted to the following system roles: AI Governance Manager, Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager	These permissions have been granted to custom roles that were previously assigned the Projects object read permission.
	View projects	This permission has been granted to the following system roles: AI Governance Manager, Assessments Manager, Compliance Manager, Data Access and Usage Manager, Data Governance Manager, Data Mapping Automation Manager, ERM Manager, ESG Manager, Enterprise Policy Manager, Exchange Manager, IT Risk Approver, IT Risk Manager, Incidents Manager, Invited, Managed Service Provider, Policy Owner, Privacy Officer, Privacy Program Auditor, Project Owner, Project Respondent, Site Admin, TPDD Admin, TPDD Compliance Manager, TPDD Enhanced Due Diligence Requester, Tech Risk & Compliance Admin, Vendor Manager, Vendorpedia Assessment Coordinator
Projects object document add	Create project attachments	These permissions have been granted to the following system roles: AI Governance Manager, Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager	These permissions have been granted to custom roles that were previously assigned the Projects object document add permission.
	Edit project attachments
ProjectsObjectCommentsAdd	View project comments	These permissions have been granted to the following system roles: AI Governance Manager, Data Mapping Automation Manager, IT Risk Manager, Privacy Officer, Site Admin, Tech Risk & Compliance Admin, Vendor Manager	These permissions have been granted to custom roles that were previously assigned the ProjectsObjectCommentsAdd permission.
	Create project comments

Linked Permissions

The following permissions have been linked and will be automatically added or removed from the custom rule during configuration as defined below. For more information, see Understanding Linked Permissions.

Note:

The permissions listed below belong to the Custom object management permission group.

Permission name	Explanation of changes
Add related objects to projects	When the Add related objects to projects permission is added to the custom role, the Add link permission will be automatically added.
Remove related objects from projects	When the Remove related objects from projects permission is added to the custom role, the Link delete permission will be automatically added.
View project related objects	When the View project related objects permission is added to the custom role, the Link read permission will be automatically added.
Edit project related objects	When the Edit project related objects permission is added to the custom role, the Link update permission will be automatically added.
Custom object type read	When any of the permissions listed below are added to the custom role, the Custom object type read permission will be automatically added: Create attribute groups for projects Delete attribute groups for projects Edit attribute groups for projects View attribute groups for projects Create project attributes Edit project attributes Export project attributes View project attributes View project workflows Edit project workflows
Object workflows manage	When any of the permissions listed below are added to the custom role, the Object workflows manage permission will be automatically added: Create project workflows Delete project workflows Edit project workflows
View project workflows	When the View project workflows permission is added to the custom role, the Object workflows view permission will be automatically added.
View projects	When the View projects permission is added to the custom role, the View basic fields for projects and the View project workflow permissions will be automatically added. When the View projects permission is removed from the custom role, the View basic fields for projects and the View project workflow permissions will be automatically removed.
Create projects	When the Create projects permission is added to the custom role, the Edit projects permission will be automatically added.
Delete projects	When the Delete projects permission is added to the custom role, the Edit projects permission will be automatically added.
Edit project attachments	When the Edit project attachments permission is added to the custom role, the Custom object add document permission will be automatically added. When the Edit project attachments permission is removed from the custom role, the Custom object add document permission will be automatically removed.
Create project tasks	When the Create project tasks permission is added to the custom role, the Custom object task view permission will be automatically added. When the Create project tasks permission is removed from the custom role, the Custom object task view permission will be automatically removed.
Create project comments	When the Create project comments permission is added to the custom role, the View project comments permission will be automatically added.
Create project risks	When the Create project risks permission is added to the custom role, the View project risks permission will be automatically added.
Create project assessments	When the Create project assessments permission is added to the custom role, the Assessments launch permission will be automatically added. When the Create project assessments permission is removed from the custom role, the Assessments launch permission will be automatically removed.
View project assessments	When the View project assessments permission is added to the custom role, the Object assessments view permission will be automatically added. When the View project assessments permission is removed from the custom role, the Object assessments view permission will be automatically removed.
Unlink project assessments	When the Unlink project assessments permission is added to the custom role, the Object assessments link permission will be automatically added. When the Unlink project assessments permission is removed from the custom role, the Object assessments link permission will be automatically removed.
Link project assessments	When the Link project assessments permission is added to the custom role, the Object assessments link permission will be automatically added. When the Link project assessments permission is removed from the custom role, the Object assessments link permission will be automatically removed.
View project controls	When the View project controls permission is added to the custom role, the Object controls view permission will be automatically added. When the View project controls permission is removed from the custom role, the Object controls view permission will be automatically removed.
Create project controls	When the Create project controls permission is added to the custom role, the Custom object controls add permission will be automatically added. When the Create project controls permission is removed from the custom role, the Custom object controls add permission will be automatically removed.
Unlink project controls	When the Unlink project controls permission is added to the custom role, the Object controls delete permission will be automatically added. When the Unlink project controls permission is removed from the custom role, the Object controls delete permission will be automatically removed.
View basic fields for projects	When the View basic fields for projects permission is added to the custom role, the View projects permission will be automatically added. When the View basic fields for projects permission is removed from the custom role, the View projects permission will be automatically removed.
View project workflow	When the View project workflow permission is added to the custom role, the Custom object read permission will be automatically added. When the View project workflow permission is removed from the custom role, the Custom object read permission will be automatically removed.
Edit project workflow	When the Edit project workflow permission is added to the custom role, the Custom object update permission will be automatically added. When the Edit project workflow permission is removed from the custom role, the Custom object update permission will be automatically removed.
Change project workflow stage	When the Change project workflow stage permission is added to the custom role, the Object workflows advance and Custom object update permissions will be automatically added. When the Change project workflow stage permission is removed from the custom role, the Object workflows advance and Custom object update permissions will be automatically removed.

Renamed Permissions

The following permissions have been renamed to improve clarity on the actions associated with each individual permission. No changes have been made to permission functionality.

Note:

The permissions listed below belong to the Custom object management permission group.

Old permission name	New permission name
Projects object type read	View projects type
Projects object type update	Edit projects type
Projects object add	Create projects
Projects object update	Edit projects
Projects object delete	Delete projects
Projects object document view	View project attachments
Projects object document delete	Delete project attachments
Projects object task view	View project tasks
Projects object task add	Create project tasks
Projects object task edit	Edit project tasks
Projects object task delete	Delete project tasks
Custom link type read	View object relationship types
Custom link type add	Create object relationship types
Custom link type update	Edit object relationship types
Projects object export	Export projects
Projects object bulk add	Bulk create projects
Projects object bulk update	Bulk edit projects
Projects bypass required approvals	Bypass workflow approvers for projects

Removed Permissions

The following permissions have been removed from the platform or removed from select system roles as defined below:

Note:

The permission listed below belonged to the Custom object management permission group.

Permission name	Explanation of change
permission.name.ProjectsObjectCommentDelete	The permission.name.ProjectsObjectCommentDelete permission has been removed from the platform. There is no impact to system or custom roles.

Linked Permissions

The following permissions have been linked and will be automatically added or removed from the custom rule during configuration as defined below. For more information, see Understanding Linked Permissions.

Permission name	Explanation of changes
View asset attachments	When the View asset attachments permission is added to the custom role, the following permissions will be automatically added: Create asset attachments Delete asset attachments Edit asset attachments Download asset attachments Note: The Download asset attachments permission can no longer be configured for custom roles and will be automatically managed via the View asset attachments permission.
View entity attachments	When the View entity attachments permission is added to the custom role, the following permissions will be automatically added: Create entity attachments Delete entity attachments Edit entity attachments Download entity attachments Note: The Download entity attachments permission can no longer be configured for custom roles and will be automatically managed via the View entity attachments permission.
View processing activity attachments	When the View processing activity attachments permission is added to the custom role, the following permissions will be automatically added: Create processing activity attachments Delete processing activity attachments Edit processing activity attachments Download processing activity attachments Note: The Download processing activity attachments permission can no longer be configured for custom roles and will be automatically managed via the View processing activity attachments permission.
View vendor attachments	When the View vendor attachments permission is added to the custom role, the following permissions will be automatically added: Create vendor attachments Delete vendor attachments Edit vendor attachments Download vendor attachments Note: The Download vendor attachments permission can no longer be configured for custom roles and will be automatically managed via the View vendor attachments permission.
Create asset attachments	When the Create asset attachments permission is added to the custom role, the Upload asset attachments permission will be automatically added. When the Edit asset attachments permission is added to the custom role, the Upload asset attachments permission will be automatically added. Note: The Upload asset attachments permission can no longer be configured for custom roles and will be automatically managed via the Create asset attachments permission or the Edit asset attachments permission.
Edit asset attachments
Create entity attachments	When the Create entity attachments permission is added to the custom role, the Upload entity attachments permission will be automatically added. When the Edit entity attachments permission is added to the custom role, the Upload entity attachments permission will be automatically added. Note: The Upload entity attachments permission can no longer be configured for custom roles and will be automatically managed via the Create entity attachments permission or the Edit entity attachments permission.
Edit entity attachments
Create processing activity attachments	When the Create processing activity attachments permission is added to the custom role, the Upload processing activity attachments permission will be automatically added. When the Edit processing activity attachments permission is added to the custom role, the Upload processing activity attachments permission will be automatically added. Note: The Upload processing activity attachments permission can no longer be configured for custom roles and will be automatically managed via the Create processing activity attachments permission or the Edit processing activity attachments permission.
Edit processing activity attachments
Create vendor attachments	When the Create vendor attachments permission is added to the custom role, the Upload vendor attachments permission will be automatically added. When the Edit vendor attachments permission is added to the custom role, the Upload vendor attachments permission will be automatically added. Note: The Upload vendor attachments permission can no longer be configured for custom roles and will be automatically managed via the Create vendor attachments permission or the Edit vendor attachments permission.
Edit vendor attachments

For historical Data Mapping Automation permissions release notes from the Spring '26 season, see the Permissions Release Notes: Data Mapping Automation (Spring '26) article.

For historical Data Mapping Automation permissions release notes from the Summer '25, Fall '25, and Winter '26 seasons, see the Permissions Release Notes: Data Mapping Automation (Summer '25 - Winter '26) article.