Scopes & Permissions

A full list of available user scopes is available below. Note: some scopes grant access to other scopes. For example, the ability to "View Email Templates" is automatically granted when permissions are given to "Manage Email Templates". This scope dependency is described by the "Dependencies" column.

Title	Description	Type	Products	Dependencies
View Only	Access is granted to all of the scopes of type "View".	View	Admin	All Scopes of Type=View
Full Admin	Full administrative access. All scopes are granted.	Modify	Admin	All Scopes
Rotate Hosted Sombra keys	Ability to perform a key rotation on the encryption keys used within your account.	Modify	Admin
Manage Global Attributes	Under the infrastructure tab, manage your custom attributes and select which views those attributes should display in.	Modify	Admin	View Global Attributes
Manage Access Controls	Manage what employees in your organization can access within Transcend.	Modify	Admin	View Employees View Scopes
Manage Billing	Manage billing details for your organization.	Modify	Admin
Manage SSO	Manage SSO configuration for members of your organization.	Modify	Admin	View SSO
Manage API Keys	Create, update and delete API keys for programmatic access to your Transcend organization.	Modify	Admin	View API Keys
Manage Organization Information	Edit the top-level organization settings details.	Modify	Admin
Manage Email Domains	Manage the domains from which Transcend can send emails on behalf of your organization.	Modify	Admin	View Email Domains
View Customer Data in Privacy Requests	Give permissions for an employee to view the data in an access request.	View	Admin, Privacy Requests
View Customer Data in Data Mapping	Give permissions for an employee to view the sampled data in the data mapping product.	View	Admin, Data Mapping
View API Keys	View the API keys on your account and see what scopes are assigned to them.	View	Admin
View Audit Events	View any audit events made throughout the platform. This includes any of the "Audit Trail" tabs across the Admin Dashboard.	View	Admin
View SSO	View the SSO configuration for your organization.	View	Admin
View Scopes	View the potential access control scopes that can be assigned to members in the organization.	View	Admin	View Employees
View All Action Items	View all action items in the organization, regardless of assignee or scopes for specific resources. This is necessary when querying API keys via the API.	View	Admin
Manage All Action Items	Manage all action items in the organization, regardless of assignee or scopes for specific resources. This is necessary when querying API keys via the API.	Modify	Admin	View All Action Items View Global Attributes
View Employees	View the list of employees within your organization.	View	Admin
View Email Domains	View the domains from which Transcend can send emails on behalf of your organization.	View	Admin
View Global Attributes	View the attribute definition key/value pairs.	View	Admin
View Legal Hold	View the individuals that have been placed on legal holds.	View	Privacy Requests
Manage Legal Holds	Manage and edit the individuals that have been placed on legal holds.	Modify	Privacy Requests	View Legal Hold
Manage Request Security	ReSign expired request encryption contexts, and data silo contexts.	Modify	Admin, Privacy Requests
Manage Request Compilation	Make changes to the compilation process of a request. This involves changing the status of data silos in your Data Map, as well as editing profiles and files.	Modify	Privacy Requests	View Incoming Requests View the Request Compilation
Manage Assigned Privacy Requests	Make changes to the compilation process of a request for requests assigned to your or your team. This involves changing the status of data silos in your Data Map, as well as editing profiles and files.	Modify	Privacy Requests	View Assigned Privacy Requests
Submit New Data Subject Request	Submit a new privacy requests.	Modify	Privacy Requests	View Data Subject Request Settings View Identity Verification Settings
Manage Data Subject Request Settings	Make changes to the request actions that your organization allows, as well as what data subjects you will serve.	Modify	Privacy Requests	View Data Subject Request Settings
Manage Email Templates	Manage the email communication templates that your organization uses to communicate with your data subjects.	Modify	Privacy Requests	View Email Templates
Manage Request Identity Verification	Manage how your organization will verify the identities of new privacy requests, and how that identity will be enriched for all of your data silos to lookup that person.	Modify	Privacy Requests	View Identity Verification Settings
Publish Privacy Center	Launch the Privacy Center on your own domain, and publish new changes.	Modify	Privacy Requests, Privacy Center	Manage Privacy Center Layout
Manage Data Map	Edit the configurations on your data silos and determine what information should be included in a request.	Modify	Privacy Requests, Data Mapping	View Data Map
Manage Privacy Center Layout	Make changes to the privacy center configuration and policies.	Modify	Privacy Requests, Privacy Center	View Privacy Center Layout Manage Policies
Manage Policies	Make changes to the policies defined underneath the privacy center.	Modify	Privacy Center	View Policies
View Policies	View the policies defined underneath the privacy center.	View	Privacy Center
Manage Internationalization Messages	Manage the internationalization messages used in the privacy center.	Modify	Privacy Center, Consent Manager	View Internationalization Messages
View Internationalization Messages	View the internationalization messages used in the privacy center.	View	Privacy Center, Consent Manager
Request Approval and Communication	The ability to approve and manage the state of privacy requests, and communicate with the data subject.	Modify	Privacy Requests	View Incoming Requests View the Request Compilation Manage Request Compilation
View Data Subject Request Settings	View the privacy request actions settings and data subject categories that your organization supports.	View	Privacy Requests
View the Request Compilation	View the status of requests as they compile across your Data Map.	View	Privacy Requests	View Incoming Requests
View Identity Verification Settings	View the settings for data subject request identity verification.	View	Privacy Requests
View Incoming Requests	View the stream of incoming requests, and any details submit through the form or later enriched.	View	Privacy Requests	View Global Attributes View Data Subject Request Settings View Email Templates
View Assigned Privacy Requests	View the stream of incoming requests assigned to you and your team. You will be able to see any request details submitted through the form or later enriched.	View	Privacy Requests	View Global Attributes View Data Subject Request Settings View Email Templates
View Privacy Center Layout	View the full configuration of the privacy center.	View	Privacy Requests, Privacy Center
View Email Templates	View the default email templates templates used to communicate with your data subjects.	View	Privacy Requests, Privacy Center
Connect Data Silos	Connect new data silos to your Data Map.	Modify	Privacy Requests, Data Mapping	View Data Map Manage Data Map View Email Templates
Manage Data Inventory	Ability to manage and edit everything in the data mapping product. Includes the data inventory, ROPE, and content classification views.	Modify	Data Mapping	View Data Inventory
Manage Assigned Data Inventory	Manage the data inventory rows in your organization's Data Map that are assigned to you or your team.	Modify	Data Mapping	View Assigned Data Inventory
Manage Assigned Integrations	Manage the integrations in your organization's Data Map that are assigned to you or your team.	Modify	Privacy Requests, Data Mapping	View Assigned Integrations
View Data Map	View your organization's Data Map and see the configuration settings for each action your support.	View	Privacy Requests, Data Mapping	View Global Attributes
View Assigned Integrations	View the integrations in your organization's Data Map that are assigned to you or your team.	View	Privacy Requests, Data Mapping	View Global Attributes
View Assigned Data Inventory	Ability to view the resources in the data mapping product that are assigned to your or your team.	View	Data Mapping	View Global Attributes View Data Subject Request Settings
View Data Inventory	Ability to view all of the data mapping product. Includes the data inventory, ROPA, and content classification views.	View	Data Mapping	View Data Map View Global Attributes View Data Subject Request Settings
Manage Consent Manager	Manage & deploy the consent manager changes to your websites.	Modify	Consent Manager	View Consent Manager Manage Data Flows Manage Consent Manager Display Settings Manage Consent Manager Developer Settings Deploy Consent Manager Deploy Test Consent Manager View Data Flows
Manage Consent Manager Developer Settings	Manage the developer settings for the Consent Manager. This does not allow for clicking the "Set Changes Live" button.	Modify	Consent Manager	View Consent Manager
Manage Consent Manager Display Settings	Manage the display settings for the consent manager. This includes messages, styles and other UI settings.	Modify	Consent Manager	View Consent Manager
Deploy Test Consent Manager	Ability to publish changes to the test Consent Manager bundle. This changes the code contents of airgap.js and attempts to invalidate the CDN.	Modify	Consent Manager	View Consent Manager
Deploy Consent Manager	Ability to publish changes to the production and test Consent Manager bundle. This changes the code contents of airgap.js and attempts to invalidate the CDN.	Modify	Consent Manager	View Consent Manager Deploy Test Consent Manager
Manage Assigned Consent Manager	Manage Data Flows & Cookies assigned to you or your team.	Modify	Consent Manager	View Assigned Consent Manager
Manage Data Flows	Ability to manage and delete Data Flows and Cookies within the Consent Manager product.	Modify	Consent Manager	View Data Flows
View Opt Out Status	Check the opt out status of a particular user.	View	Privacy Requests, Consent Manager
View Data Flows	View Data Flows (tracking purpose maps, site scans)	View	Consent Manager	View Consent Manager
View Assigned Consent Manager	View Data Flows and Cookies assigned to you or your team.	View	Consent Manager	View Global Attributes
View Consent Manager	View the consent manager configuration.	View	Consent Manager	View Global Attributes View Managed Consent Database Admin API
View Assessments	View the assessments and assessment templates.	View	Assessments, Data Mapping
Manage Assessments	Manage and edit assessments and assessment templates	Modify	Assessments, Data Mapping	View Assessments
View Assigned Assessments	View the assigned assessments forms.	View	Assessments, Data Mapping
Manage Assigned Assessments	Manage and edit the assigned assessments.	Modify	Assessments, Data Mapping	View Assigned Assessments
Approve Assessments	Approve the assessments and assessment templates	Modify	Assessments, Data Mapping	View Assessments
View Pathfinder	View the pathfinder settings.	View	Pathfinder	View Global Attributes
Manage Pathfinder	Manage the pathfinder settings under that pathfinder side menu	Modify	Pathfinder	View Pathfinder
View Contract Scanning	View the contract scanning side menu - including setting and contracts.	View	Pathfinder	View Global Attributes
Manage Contract Scanning	Upload and manage contracts under the contract scanning side menu	Modify	Pathfinder	View Contract Scanning
View Prompts	View the prompts and prompt templates.	View	Prompt Manager	View Global Attributes
Manage Prompts	Manage and edit prompts and prompt templates	Modify	Prompt Manager	View Prompts
View Prompt Runs	View the output run results for prompts.	View	Prompt Manager	View Prompts
Manage Prompt Runs	Manage, edit and create prompt run results	Modify	Prompt Manager	View Prompt Runs View Prompts
View Code Scanning	View the code scanning tables.	View	Data Mapping	View Global Attributes
Manage Code Scanning	Manage, edit and create records in code scanning	Modify	Data Mapping	View Code Scanning
Execute Prompt	Ability to execute a prompt and view the outputs	Modify	Prompt Manager	View Prompt Runs View Prompts
View Auditor Runs	View the output run results for Auditor.	View	Web Auditor
Manage Auditor Runs and Schedules	Manage, edit and create prompt run results	Modify	Web Auditor	View Auditor Runs
Execute Auditor	Ability to execute or schedule Auditor and view the outputs	Modify	Web Auditor	View Auditor Runs
Approve Prompts	Approve the prompts and prompt templates	Modify	Prompt Manager	View Prompts
Manage Action Item Collections	Manage and edit action item collections	Modify	Admin
View Managed Consent Database Admin API	Ability to query user consent preferences with the Managed Consent Database Admin API	View	Consent Manager, Preference Store
Modify User Stored Preferences	Ability to make updates to user stored consent preferences	Modify	Consent Manager, Preference Store	View Managed Consent Database Admin API
Manage Preference Store Settings	Ability to make updates to preference store settings	Modify	Preference Store	View Preference Store Settings
View Preference Store Settings	Ability to view preference store settings	Modify	Preference Store	View Preference Store Settings