Scopes & Permissions
A full list of available user scopes is available below. Note: some scopes grant access to other scopes. For example, the ability to "View Email Templates" is automatically granted when permissions are given to "Manage Email Templates". This scope dependency is described by the "Dependencies" column.
Title | Description | Type | Products | Dependencies |
---|---|---|---|---|
View Only | Access is granted to all of the scopes of type "View". | View | DSR Automation, Data Inventory, Consent Management, Privacy Center, Administration, Assessments, Pathfinder, Preference Management, Prompt Manager, Contract Scanning, Web Auditor, Sombra, Silo Discovery, Structured Discovery, Unstructured Discovery, Data Lineage |
|
Full Admin | Full administrative access. All scopes are granted. | Modify | DSR Automation, Data Inventory, Consent Management, Privacy Center, Administration, Assessments, Pathfinder, Preference Management, Prompt Manager, Contract Scanning, Web Auditor, Sombra, Silo Discovery, Structured Discovery, Unstructured Discovery, Data Lineage |
|
Rotate Hosted Sombra keys | Ability to perform a key rotation on the encryption keys used within your account. | Modify | Sombra | |
Manage Global Attributes | Under the infrastructure tab, manage your custom attributes and select which views those attributes should display in. | Modify | DSR Automation, Data Inventory, Consent Management, Structured Discovery, Administration, Assessments, Pathfinder, Prompt Manager, Web Auditor, Contract Scanning |
|
Manage Access Controls | Manage what employees in your organization can access within Transcend. | Modify | Administration |
|
Manage Billing | Manage billing details for your organization. | Modify | Administration | |
Manage SSO | Manage SSO configuration for members of your organization. | Modify | Administration |
|
Manage API Keys | Create, update and delete API keys for programmatic access to your Transcend organization. | Modify | Administration |
|
Manage Organization Information | Edit the top-level organization settings details. | Modify | Administration | |
Manage Email Domains | Manage the domains from which Transcend can send emails on behalf of your organization. | Modify | Administration, DSR Automation, Privacy Center, Assessments |
|
View Customer Data in Privacy Requests | Give permissions for an employee to view the data in an access request. | View | Administration, DSR Automation | |
View Customer Data in Data Mapping | Give permissions for an employee to view the sampled data in the data mapping product. | View | Administration, Structured Discovery, Unstructured Discovery | |
View API Keys | View the API keys on your account and see what scopes are assigned to them. | View | Administration | |
View Audit Events | View any audit events made throughout the platform. This includes any of the "Audit Trail" tabs across the Admin Dashboard. | View | Administration | |
View SSO | View the SSO configuration for your organization. | View | Administration | |
View Scopes | View the potential access control scopes that can be assigned to members in the organization. | View | Administration |
|
View All Action Items | View all action items in the organization, regardless of assignee or scopes for specific resources. This is necessary when querying API keys via the API. | View | Administration | |
Manage All Action Items | Manage all action items in the organization, regardless of assignee or scopes for specific resources. This is necessary when querying API keys via the API. | Modify | Administration |
|
View Employees | View the list of employees within your organization. | View | Administration | |
View Email Domains | View the domains from which Transcend can send emails on behalf of your organization. | View | Administration, DSR Automation, Privacy Center, Assessments | |
View Global Attributes | View the attribute definition key/value pairs. | View | DSR Automation, Data Inventory, Consent Management, Structured Discovery, Administration, Assessments, Pathfinder, Prompt Manager, Web Auditor, Contract Scanning | |
View Legal Hold | View the individuals that have been placed on legal holds. | View | DSR Automation | |
Manage Legal Holds | Manage and edit the individuals that have been placed on legal holds. | Modify | DSR Automation |
|
Manage Request Security | ReSign expired request encryption contexts, and data silo contexts. | Modify | Administration, DSR Automation | |
Manage Request Compilation | Make changes to the compilation process of a request. This involves changing the status of data silos in your Data Map, as well as editing profiles and files. | Modify | DSR Automation |
|
Manage Assigned Privacy Requests | Make changes to the compilation process of a request for requests assigned to your or your team. This involves changing the status of data silos in your Data Map, as well as editing profiles and files. | Modify | DSR Automation |
|
Submit New Data Subject Request | Submit a new privacy requests. | Modify | DSR Automation |
|
Manage Data Subject Request Settings | Make changes to the request actions that your organization allows, as well as what data subjects you will serve. | Modify | DSR Automation |
|
Manage Email Templates | Manage the email communication templates that your organization uses to communicate with your data subjects. | Modify | DSR Automation, Privacy Center, Assessments |
|
Manage Request Identity Verification | Manage how your organization will verify the identities of new privacy requests, and how that identity will be enriched for all of your data silos to lookup that person. | Modify | DSR Automation |
|
Publish Privacy Center | Launch the Privacy Center on your own domain, and publish new changes. | Modify | Privacy Center |
|
Manage Data Map | Edit the configurations on your data silos and determine what information should be included in a request. | Modify | DSR Automation, Data Inventory, Structured Discovery, Silo Discovery, Unstructured Discovery |
|
Manage Privacy Center Layout | Make changes to the privacy center configuration and policies. | Modify | Privacy Center |
|
Manage Policies | Make changes to the policies defined underneath the privacy center. | Modify | Privacy Center |
|
View Policies | View the policies defined underneath the privacy center. | View | Privacy Center | |
Manage Internationalization Messages | Manage the internationalization messages used in the privacy center. | Modify | Privacy Center, Consent Management |
|
View Internationalization Messages | View the internationalization messages used in the privacy center. | View | Privacy Center, Consent Management | |
Request Approval and Communication | The ability to approve and manage the state of privacy requests, and communicate with the data subject. | Modify | DSR Automation |
|
View Data Subject Request Settings | View the privacy request actions settings and data subject categories that your organization supports. | View | DSR Automation | |
View the Request Compilation | View the status of requests as they compile across your Data Map. | View | DSR Automation |
|
View Identity Verification Settings | View the settings for data subject request identity verification. | View | DSR Automation | |
View Incoming Requests | View the stream of incoming requests, and any details submit through the form or later enriched. | View | DSR Automation |
|
View Assigned Privacy Requests | View the stream of incoming requests assigned to you and your team. You will be able to see any request details submitted through the form or later enriched. | View | DSR Automation |
|
View Privacy Center Layout | View the full configuration of the privacy center. | View | Privacy Center | |
View Email Templates | View the default email templates templates used to communicate with your data subjects. | View | DSR Automation, Privacy Center, Assessments | |
Connect Data Silos | Connect new data silos to your Data Map. | Modify | DSR Automation, Silo Discovery, Structured Discovery, Unstructured Discovery |
|
Manage Data Inventory | Ability to manage and edit everything in the data mapping product. Includes the data inventory, ROPE, and content classification views. | Modify | Data Inventory, Structured Discovery, Silo Discovery, Unstructured Discovery |
|
Manage Assigned Data Inventory | Manage the data inventory rows in your organization's Data Map that are assigned to you or your team. | Modify | Data Inventory, Structured Discovery, Silo Discovery, Unstructured Discovery |
|
Manage Assigned Integrations | Manage the integrations in your organization's Data Map that are assigned to you or your team. | Modify | DSR Automation, Data Inventory, Structured Discovery, Silo Discovery, Unstructured Discovery |
|
View Data Map | View your organization's Data Map and see the configuration settings for each action your support. | View | DSR Automation, Data Inventory, Structured Discovery, Silo Discovery, Unstructured Discovery |
|
View Assigned Integrations | View the integrations in your organization's Data Map that are assigned to you or your team. | View | DSR Automation, Data Inventory, Structured Discovery, Silo Discovery, Unstructured Discovery |
|
View Assigned Data Inventory | Ability to view the resources in the data mapping product that are assigned to your or your team. | View | Data Inventory, Structured Discovery, Silo Discovery, Unstructured Discovery |
|
View Data Inventory | Ability to view all of the data mapping product. Includes the data inventory, ROPA, and content classification views. | View | Data Inventory, Structured Discovery, Silo Discovery, Unstructured Discovery |
|
Manage Consent Manager | Manage & deploy the consent manager changes to your websites. | Modify | Consent Management |
|
Manage Consent Manager Developer Settings | Manage the developer settings for the Consent Manager. This does not allow for clicking the "Set Changes Live" button. | Modify | Consent Management |
|
Manage Consent Manager Display Settings | Manage the display settings for the consent manager. This includes messages, styles and other UI settings. | Modify | Consent Management |
|
Deploy Test Consent Manager | Ability to publish changes to the test Consent Manager bundle. This changes the code contents of airgap.js and attempts to invalidate the CDN. | Modify | Consent Management |
|
Deploy Consent Manager | Ability to publish changes to the production and test Consent Manager bundle. This changes the code contents of airgap.js and attempts to invalidate the CDN. | Modify | Consent Management |
|
Manage Assigned Consent Manager | Manage Data Flows & Cookies assigned to you or your team. | Modify | Consent Management |
|
Manage Data Flows | Ability to manage and delete Data Flows and Cookies within the Consent Manager product. | Modify | Consent Management |
|
View Opt Out Status | Check the opt out status of a particular user. | View | DSR Automation, Consent Management | |
View Data Flows | View Data Flows (tracking purpose maps, site scans) | View | Consent Management |
|
View Assigned Consent Manager | View Data Flows and Cookies assigned to you or your team. | View | Consent Management |
|
View Consent Manager | View the consent manager configuration. | View | Consent Management |
|
View Assessments | View the assessments and assessment templates. | View | Assessments, Data Inventory | |
Manage Assessments | Manage and edit assessments and assessment templates | Modify | Assessments, Data Inventory |
|
View Assigned Assessments | View the assigned assessments forms. | View | Assessments, Data Inventory | |
Manage Assigned Assessments | Manage and edit the assigned assessments. | Modify | Assessments, Data Inventory |
|
Approve Assessments | Approve the assessments and assessment templates | Modify | Assessments, Data Inventory |
|
View Pathfinder | View the pathfinder settings. | View | Pathfinder |
|
Manage Pathfinder | Manage the pathfinder settings under that pathfinder side menu | Modify | Pathfinder |
|
View Contract Scanning | View the contract scanning side menu - including setting and contracts. | View | Contract Scanning |
|
Manage Contract Scanning | Upload and manage contracts under the contract scanning side menu | Modify | Contract Scanning |
|
View Prompts | View the prompts and prompt templates. | View | Prompt Manager |
|
Manage Prompts | Manage and edit prompts and prompt templates | Modify | Prompt Manager |
|
View Prompt Runs | View the output run results for prompts. | View | Prompt Manager |
|
Manage Prompt Runs | Manage, edit and create prompt run results | Modify | Prompt Manager, Pathfinder |
|
View Code Scanning | View the code scanning tables. | View | Data Inventory, Consent Management |
|
Manage Code Scanning | Manage, edit and create records in code scanning | Modify | Data Inventory, Consent Management |
|
Execute Prompt | Ability to execute a prompt and view the outputs | Modify | Prompt Manager |
|
View Auditor Runs | View the output run results for Auditor. | View | Web Auditor | |
Manage Auditor Runs and Schedules | Manage, edit and create prompt run results | Modify | Web Auditor |
|
Execute Auditor | Ability to execute or schedule Auditor and view the outputs | Modify | Web Auditor |
|
Approve Prompts | Approve the prompts and prompt templates | Modify | Prompt Manager |
|
Manage Action Item Collections | Manage and edit action item collections | Modify | Administration | |
View Managed Consent Database Admin API | Ability to query user consent preferences with the Managed Consent Database Admin API | View | Consent Management, Preference Management | |
Modify User Stored Preferences | Ability to make updates to user stored consent preferences | Modify | Consent Management, Preference Management |
|
Manage Preference Store Settings | Ability to make updates to preference store settings | Modify | Preference Management |
|
View Preference Store Settings | Ability to view preference store settings | Modify | Preference Management |
|