After successful implementation, TrustArc can enable “auto-create” feature for SSO users who log in for the first time if they do NOT exist in the platform and will be assigned the lowest privilege possible. For information about the other roles and the permissions assigned with each role, contact support@trustarc.com . If you want to elevate their roles, please contact your company administrator.