Assessment Manager User Roles & Permissions

OverviewAssessment CreatorAssessment OwnerDefault RespondentRespondentApproverParticipant

Overview

Assessment Manager uses a combination of system-level AAA (Account Access and Authorization) roles and assessment-specific roles to control what users can see and do within assessments. Understanding how these two role types interact is essential for managing your assessment workflow effectively.

This article defines the permissions available to each AAA role for every assessment-specific role: Assessment Creator, Assessment Owner, Default Respondent, Respondent, Approver, and Participant. Permissions are organized by location — the Assessment List page, the Edit Assessment page, the Assessment Summary page, and Tasks — within each role's section. Use the navigation bar above to jump to a specific assessment role.

What you can do

✓Understand which AAA roles can create, clone, or delete assessments under each assessment role

✓Identify which roles can edit assessment information, manage participants, and add approvers

✓Determine which roles can create and complete tasks at each assessment state

Related articles

→ Understanding the Different Assessment Manager User Roles

→ Assessment Roles

Assessment Creator

The tables below define what the Assessment Creator can do if assigned with a particular AAA role.

Assessments List Page

AAA Role	Permissions
	Create / Clone Assessment	Delete Assessment
Admin	Yes	Yes
User	Yes	Yes
User Limited	Can only clone	Yes
Respondent	No	No
Reviewer	Yes	Yes
Project Manager	Yes	Yes
Policy Manager Collaborator	Yes	Yes
Policy Manager	Yes	Yes
Non-System User	NA	NA
DPM Limited	Yes	Yes
Data Privacy Manager Collaborator	Yes	Yes
Data Privacy Manager	Yes	Yes
Privacy Expert	Yes	No

Edit Assessment Page

AAA Role	Permissions
	Edit Assessment Information	Add, Edit, or Delete Comments/Attachments	Add and Replace Approver
Admin	Yes	Yes	Yes
User	No	No	No
User Limited	No	No	No
Respondent	No	No	No
Reviewer	No	No	No
Project Manager	No	No	No
Policy Manager Collaborator	No	No	No
Policy Manager	No	No	No
Non-System User	No	No	No
DPM Limited	No	No	No
Data Privacy Manager Collaborator	No	No	No
Data Privacy Manager	No	No	No
Privacy Expert	No	Yes	Yes

AAA Role	Permissions
	Delete Approver	Add Participants	Add Data Record
Admin	Yes	Yes	NA
User	No	No	NA
User Limited	No	No	NA
Respondent	No	No	NA
Reviewer	No	No	No
Project Manager	No	No	NA
Policy Manager Collaborator	No	No	NA
Policy Manager	No	No	NA
Non-System User	No	No	NA
DPM Limited	No	No	NA
Data Privacy Manager Collaborator	No	No	NA
Data Privacy Manager	No	No	NA
Privacy Expert	Yes	Yes	No

AAA Role	Permissions
	Add Tags	Add Labels
Admin	Yes	Yes
User	No	No
User Limited	No	No
Respondent	No	No
Reviewer	No	No
Project Manager	No	No
Policy Manager Collaborator	No	No
Policy Manager	No	No
Non-System User	No	No
DPM Limited	No	No
Data Privacy Manager Collaborator	No	No
Data Privacy Manager	No	No
Privacy Expert	No	No

Assessment Summary Page

AAA Role	Permissions
	Edit Assessment Information	Add, Edit, or Delete Comments/Attachments
Admin	Yes, but only Tags, Labels, and Participants can be modified in any state except Approved	Yes
User	Yes, but can only edit comments and attachments	Yes
User Limited	No	Yes
Respondent	No	No
Reviewer	Yes, but can only edit comments and attachments	Yes
Project Manager	Yes, but can only edit comments and attachments	Yes
Policy Manager Collaborator	Yes, but can only edit comments and attachments	Yes
Policy Manager	Yes, but can only edit comments and attachments	Yes
Non-System User	NA	NA
DPM Limited	Yes, but can only edit comments and attachments	Yes
Data Privacy Manager Collaborator	Yes, but can only edit comments and attachments	Yes
Data Privacy Manager	Yes, but can only edit comments and attachments	Yes
Privacy Expert	Yes in any state except Approved	Yes

AAA Role	Permissions
	Add Approver	Delete or Replace Approver	Add Participants
Admin	No	No	Yes
User	Yes	No	No
User Limited	No	No	No
Respondent	No	No	No
Reviewer	Yes	No	No
Project Manager	Yes	No	No
Policy Manager Collaborator	Yes	No	No
Policy Manager	Yes	No	No
Non-System User	NA	NA	NA
DPM Limited	Yes	No	No
Data Privacy Manager Collaborator	Yes	No	No
Data Privacy Manager	Yes	No	No
Privacy Expert	Yes	Yes	Yes

AAA Role	Permissions
	Add Data Record	Add Tags	Add Labels
Admin	NA	Yes	Yes
User	NA	No	No
User Limited	NA	No	No
Respondent	NA	No	No
Reviewer	NA	Yes	No
Project Manager	NA	No	No
Policy Manager Collaborator	NA	No	No
Policy Manager	NA	No	No
Non-System User	NA	NA	NA
DPM Limited	NA	Yes	No
Data Privacy Manager Collaborator	NA	No	No
Data Privacy Manager	NA	No	No
Privacy Expert	No	No	No

Tasks

AAA Role	Permissions
	Create Manual Tasks	Create Remediation Tasks
Admin	Yes in any state	Yes in any state except Approved
User	No	No
User Limited	No	No
Respondent	No	No
Reviewer	Yes in any state	Yes in any state
Project Manager	Yes in any state	Yes in any state except Approved
Policy Manager Collaborator	Yes in any state	Yes in any state
Policy Manager	Yes in any state	Yes in any state
Non-System User	NA	NA
DPM Limited	Yes in any state	Yes in any state
Data Privacy Manager Collaborator	Yes in any state	Yes in any state
Data Privacy Manager	Yes in any state	Yes in any state
Privacy Expert	Yes in any state	Yes in any state

AAA Role	Permissions
	Mark Tasks Complete as Task Creator	Mark Tasks Complete as Task Assignee
Admin	Yes in any state	Yes in any state
User	No	Yes in any state
User Limited	No	Yes
Respondent	No	No
Reviewer	Yes in any state	Yes in any state
Project Manager	Yes in any state	Yes in any state
Policy Manager Collaborator	Yes in any state	Yes in any state
Policy Manager	No	Yes in any state
Non-System User	NA	NA
DPM Limited	Yes in any state	Yes in any state
Data Privacy Manager Collaborator	Yes in any state	Yes in any state
Data Privacy Manager	Yes in any state	Yes in any state
Privacy Expert	Yes in any state	Yes in any state

Assessment Owner

The tables below define what the Assessment Owner can do if assigned with a particular AAA role.

Assessments List Page

AAA Role	Permissions
	Create / Clone Assessment	Delete Assessment
Admin	Yes	Yes
User	Yes	Yes
User Limited	Yes	Yes
Respondent	No	No
Reviewer	Yes	Yes
Project Manager	Yes	Yes
Policy Manager Collaborator	Yes	Yes
Policy Manager	Yes	Yes
Non-System User	NA	NA
DPM Limited	Yes	Yes
Data Privacy Manager Collaborator	Yes	Yes
Data Privacy Manager	Yes	Yes
Privacy Expert	Yes	No

Edit Assessment Page

AAA Role	Permissions
	Edit Assessment Information	Add, Edit, or Delete Comments/Attachments
Admin	Yes in all assessment states except Approved	Yes
User	Yes in all assessment states except Approved	Yes
User Limited	Yes, except Pending Approval, Approved, Approved Pending Remediation, and Failed	Yes
Respondent	No	No
Reviewer	Yes, only if assessment is in Open state	Yes
Project Manager	Yes, only if assessment is in Open state	Yes
Policy Manager Collaborator	Yes, only if assessment is in Open or Survey state	Yes
Policy Manager	No	Yes
Non-System User	NA	NA
DPM Limited	Yes, only if assessment is in Open state	Yes
Data Privacy Manager Collaborator	Yes, only if assessment is in Open or Survey state	Yes
Data Privacy Manager	No	Yes
Privacy Expert	No	Yes

AAA Role	Permissions
	Add/Delete/Replace Approver	Add Participants	Add Data Record	Add Tags	Add Labels
Admin	Yes	Yes	NA	Yes	Yes
User	Yes	Yes	NA	Yes	Yes
User Limited	Yes	Yes	NA	Yes	Yes
Respondent	No	No	No	No	No
Reviewer	Yes	Yes	NA	Yes	Yes
Project Manager	Yes	Yes	NA	Yes	Yes
Policy Manager Collaborator	Yes	Yes	NA	Yes	Yes
Policy Manager	No	No	NA	No	No
Non-System User	NA	NA	NA	NA	NA
DPM Limited	Yes	Yes	NA	Yes	Yes
Data Privacy Manager Collaborator	Yes	Yes	NA	Yes	Yes
Data Privacy Manager	No	No	NA	No	No
Privacy Expert	No	No	NA	No	No

Tasks

AAA Role	Permissions
	Create Manual Tasks	Create Remediation Tasks	Mark Complete as Task Creator	Mark Complete as Task Assignee
Admin	Yes in any state	Yes in any state	Yes in any state	Yes in any state
User	No	No	No	Yes in any state
User Limited	Yes	Yes	No	Yes
Respondent	No	No	No	No
Reviewer	Yes in any state	Yes in any state	Yes in any state	Yes in any state
Project Manager	Yes in any state	Yes in any state	Yes in any state	Yes in any state
Policy Manager Collaborator	Yes in any state	Yes in any state	Yes	Yes in any state
Policy Manager	Yes in any state	Yes in any state	No	Yes in any state
Non-System User	NA	NA	NA	NA
DPM Limited	Yes in any state	Yes in any state	No	Yes in any state
Data Privacy Manager Collaborator	Yes in any state	Yes in any state	No	Yes in any state
Data Privacy Manager	Yes in any state	Yes in any state	No	Yes in any state
Privacy Expert	Yes in any state	Yes in any state	Yes in any state	Yes in any state

Default Respondent

The tables below define what the Default Respondent can do if assigned with a particular AAA role.

Assessment List Page

AAA Role	Permissions
	Create / Clone Assessment	Delete Assessment
User	No	No
User Limited	No	No
Respondent	No	No
Reviewer	No	No
Project Manager	Yes	No
Policy Manager Collaborator	Yes	No
Policy Manager	Yes	No
Non-System User	No	No
DPM Limited	Yes	No
Data Privacy Manager Collaborator	Yes	Yes
Data Privacy Manager	Yes	Yes
Privacy Expert	Yes	No

Edit Assessment Page

AAA Role	Permissions
	Edit Assessment Information	Add, Edit, or Delete Comments/Attachments	Add and Replace Approver
Admin	Yes	Yes	Yes
User	NA	No	No
User Limited	No	No	No
Respondent	No	No	No
Reviewer	No	No	No
Project Manager	No	No	No
Policy Manager Collaborator	No	No	No
Policy Manager	No	No	No
Non-System User	No	No	No
DPM Limited	No	No	No
Data Privacy Manager Collaborator	No	No	No
Data Privacy Manager	No	No	No
Privacy Expert	No	Yes	Yes

AAA Role	Permissions
	Delete Approver	Add Participants	Add Data Record
Admin	Yes	Yes	NA
User	No	No	NA
User Limited	No	No	NA
Respondent	No	No	NA
Reviewer	No	No	NA
Project Manager	No	No	NA
Policy Manager Collaborator	No	No	NA
Policy Manager	No	No	NA
Non-System User	No	No	NA
DPM Limited	No	No	NA
Data Privacy Manager Collaborator	No	No	NA
Data Privacy Manager	No	No	NA
Privacy Expert	Yes	Yes	NA

AAA Role	Permissions
	Add Tags	Add Labels
Admin	Yes	Yes
User	No	No
User Limited	No	No
Respondent	No	No
Reviewer	No	No
Project Manager	No	No
Policy Manager Collaborator	No	No
Policy Manager	No	No
Non-System User	No	No
DPM Limited	No	No
Data Privacy Manager Collaborator	No	No
Data Privacy Manager	No	No
Privacy Expert	No	No

Assessment Summary Page

AAA Role	Permissions
	Edit Assessment Information	Add, Edit, or Delete Comments/Attachments	Add, Delete, or Replace Approver
Admin	Yes in any state except Approved	Yes	Yes
User	Yes	Yes	No
User Limited	Yes, only in Not Started and In Progress states	Yes	No
Respondent	Yes, but can only edit comments and attachments	Yes	No
Reviewer	Yes, but can only edit assessment labels, comments and attachments	Yes	No
Project Manager	Yes, but can only edit comments and attachments	Yes	No
Policy Manager Collaborator	Yes, but can only edit comments and attachments	Yes	No
Policy Manager	Yes, but can only edit comments and attachments	Yes	No
Non-System User	Yes, but can only edit comments and attachments	Yes	No
DPM Limited	No	No	No
Data Privacy Manager Collaborator	Yes, but can only edit comments and attachments	Yes	No
Data Privacy Manager	Yes, but can only edit comments and attachments	Yes	No
Privacy Expert	Yes, but can only edit comments and attachments	Yes	No

AAA Role	Permissions
	Add Participants	Add Data Record	Add Tags	Add Labels
Admin	Yes	NA	Yes	Yes
User	No	NA	No	No
User Limited	No	NA	No	Yes
Respondent	No	NA	No	No
Reviewer	No	NA	No	No
Project Manager	No	NA	No	No
Policy Manager Collaborator	No	NA	No	No
Policy Manager	No	NA	No	No
Non-System User	No	NA	No	No
DPM Limited	No	NA	No	No
Data Privacy Manager Collaborator	NA	NA	No	No
Data Privacy Manager	NA	NA	No	No
Privacy Expert	Yes	NA	No	No

Tasks

AAA Role	Permissions
	Create Manual Tasks	Create Remediation Tasks	Mark Complete as Task Creator	Mark Complete as Task Assignee
Admin	Yes in any state	Yes in any state	Yes in any state	Yes in any state
User	Yes in any state	Yes in any state	No	Yes in any state
User Limited	Yes	Yes	No	Yes
Respondent	No	No	No	No
Reviewer	Yes in any state	Yes in any state	No	Yes in any state
Project Manager	Yes in any state	Yes in any state	No	Yes in any state
Policy Manager Collaborator	Yes in any state	Yes in any state	No	Yes in any state
Policy Manager	Yes in any state	Yes in any state	No	Yes in any state
Non-System User	NA	NA	NA	NA
DPM Limited	Yes in any state	Yes in any state	No	Yes in any state
Data Privacy Manager Collaborator	Yes in any state	Yes in any state	No	Yes in any state
Data Privacy Manager	Yes in any state	Yes in any state	No	Yes in any state
Privacy Expert	Yes in any state	Yes in any state	Yes in any state	Yes in any state

Note: Non-system users can only answer surveys as a default respondent.

Respondent

The tables below define what the Respondent can do if assigned with a particular AAA role.

Assessment List Page

AAA Role	Permissions
	Create / Clone Assessment	Delete Assessment
Admin	Yes	Yes
User	Yes	No
User Limited	No	No
Respondent	No	No
Reviewer	Yes	No
Project Manager	Yes, but can clone only	No
Policy Manager Collaborator	Yes	No
Policy Manager	Yes	No
Non-System User	NA	NA
DPM Limited	Yes	No
Data Privacy Manager Collaborator	Yes	Yes
Data Privacy Manager	Yes	Yes
Privacy Expert	Yes	No

Edit Assessment Page

AAA Role	Permissions
	Edit Assessment Information	Add, Edit, or Delete Comments/Attachments	Add, Delete, or Replace Approver
Admin	Yes	Yes	Yes
User	NA	No	No
User Limited	No	No	No
Respondent	No	No	No
Reviewer	No	No	No
Project Manager	No	No	No
Policy Manager Collaborator	No	No	No
Policy Manager	No	Yes	Yes
Non-System User	No	No	No
DPM Limited	No	No	No
Data Privacy Manager Collaborator	No	No	No
Data Privacy Manager	No	No	No
Privacy Expert	No	No	No

AAA Role	Permissions
	Add Participants	Add Data Record	Add Tags	Add Labels
Admin	Yes	NA	No	No
User	No	NA	No	No
User Limited	No	NA	No	No
Respondent	No	No	No	No
Reviewer	No	NA	No	No
Project Manager	Yes	NA	No	No
Policy Manager Collaborator	No	NA	No	No
Policy Manager	No	No	No	No
Non-System User	No	NA	No	No
DPM Limited	No	No	No	No
Data Privacy Manager Collaborator	No	NA	No	No
Data Privacy Manager	NA	NA	No	No
Privacy Expert	NA	NA	No	No

Assessment Summary Page

AAA Role	Permissions
	Edit Assessment Information	Add, Edit, or Delete Comments/Attachments	Add, Delete, or Replace Approver
Admin	Yes in any state except Approved	Yes	Yes
User	Yes, but can only edit comments and attachments	Yes	No
User Limited	Yes	Yes	No
Respondent	Yes, but can only edit comments and attachments	Yes	No
Reviewer	Yes, but can only edit comments and attachments	Yes	No
Project Manager	Yes, but can only edit comments and attachments	Yes	No
Policy Manager Collaborator	Yes, but can only edit comments and attachments	Yes	No
Policy Manager	Yes, but can only edit comments and attachments	Yes	No
Non-System User	NA	NA	NA
DPM Limited	Yes, but can only edit comments and attachments	Yes	No
Data Privacy Manager Collaborator	Yes, but can only edit comments and attachments	Yes	No
Data Privacy Manager	Yes, but can only edit comments and attachments	Yes	No
Privacy Expert	Yes in any state except Approved	Yes	Yes

AAA Role	Permissions
	Add Participants	Add Data Record	Add Tags	Add Labels
Admin	Yes	Yes	Yes	Yes
User	No	NA	No	No
User Limited	No	No	No	No
Respondent	No	NA	No	No
Reviewer	No	No	No	No
Project Manager	Yes	NA	No	No
Policy Manager Collaborator	No	NA	No	No
Policy Manager	No	No	No	No
Non-System User	NA	NA	NA	NA
DPM Limited	No	No	No	No
Data Privacy Manager Collaborator	NA	NA	No	No
Data Privacy Manager	NA	NA	No	No
Privacy Expert	NA	NA	No	No

Tasks

AAA Role	Permissions
	Create Manual Tasks	Create Remediation Tasks	Mark Complete as Task Creator	Mark Complete as Task Assignee
Admin	Yes in any state	Yes in any state	Yes in any state	Yes in any state
User	Yes in any state	Yes in any state	Yes in any state	Yes in any state
User Limited	Yes	Yes	Yes	Yes
Respondent	No	No	No	No
Reviewer	Yes in any state	Yes in any state	Yes in any state	Yes in any state
Project Manager	Yes in any state	Yes in any state	Yes in any state	Yes in any state
Policy Manager Collaborator	Yes in any state	Yes in any state	Yes in any state	Yes in any state
Policy Manager	Yes in any state	Yes in any state	Yes in any state	Yes in any state
Non-System User	NA	NA	NA	NA
DPM Limited	Yes in any state	Yes in any state	Yes in any state	Yes in any state
Data Privacy Manager Collaborator	Yes in any state	Yes in any state	Yes in any state	Yes in any state
Data Privacy Manager	Yes in any state	Yes in any state	Yes in any state	Yes in any state
Privacy Expert	Yes in any state	Yes in any state	Yes in any state	Yes in any state

Approver

The tables below define what the Approver can do if assigned with a particular AAA role.

Assessment List Page

AAA Role	Permissions
	Create / Clone Assessment	Delete Assessment
Admin	Yes	Yes
User	Yes	No
User Limited	No	No
Respondent	No	No
Reviewer	Yes	No
Project Manager	Yes, but can clone only	No
Policy Manager Collaborator	Yes	No
Policy Manager	Yes	No
Non-System User	NA	NA
DPM Limited	Yes	No
Data Privacy Manager Collaborator	Yes	Yes
Data Privacy Manager	Yes	Yes
Privacy Expert	Yes	No

Edit Assessment Page

AAA Role	Permissions
	Edit Assessment Information	Add, Edit, or Delete Comments/Attachments	Add, Delete, or Replace Approver
Admin	Yes in any state except Approved	Yes	Yes
User	NA	No	No
User Limited	No	No	No
Respondent	No	No	No
Reviewer	No	No	No
Project Manager	No	No	No
Policy Manager Collaborator	No	No	No
Policy Manager	No	No	No
Non-System User	NA	NA	NA
DPM Limited	No	No	No
Data Privacy Manager Collaborator	No	No	No
Data Privacy Manager	No	No	No
Privacy Expert	No	Yes	Yes

AAA Role	Permissions
	Add Participants	Add Data Record	Add Tags	Add Labels
Admin	Yes	NA	Yes	Yes
User	No	NA	No	No
User Limited	No	NA	No	No
Respondent	No	No	No	No
Reviewer	No	NA	No	No
Project Manager	No	NA	No	No
Policy Manager Collaborator	No	NA	No	No
Policy Manager	No	NA	No	No
Non-System User	NA	NA	NA	NA
DPM Limited	No	NA	No	No
Data Privacy Manager Collaborator	No	No	No	No
Data Privacy Manager	No	NA	No	No
Privacy Expert	Yes	No	No	No

Assessment Summary Page

AAA Role	Permissions
	Edit Assessment Information	Add, Edit, or Delete Comments/Attachments	Add, Delete, or Replace Approver
Admin	Yes in any state except Approved	Yes	Yes
User	Yes, but can only edit comments and attachments	Yes	No
User Limited	Yes	Yes	No
Respondent	Yes, but can only edit comments and attachments	Yes	No
Reviewer	Yes, but can only edit comments and attachments	Yes	No
Project Manager	Yes, but can only edit comments and attachments	Yes	No
Policy Manager Collaborator	Yes, but can only edit comments and attachments	Yes	No
Policy Manager	Yes, but can only edit comments and attachments	Yes	No
Non-System User	NA	NA	NA
DPM Limited	Yes, but can only edit comments and attachments	Yes	No
Data Privacy Manager Collaborator	Yes, but can only edit comments and attachments	Yes	No
Data Privacy Manager	Yes, but can only edit comments and attachments	Yes	No
Privacy Expert	Yes in any state except Approved	Yes	Yes

AAA Role	Permissions
	Add Participants	Add Data Record	Add Tags	Add Labels
Admin	Yes	Yes	Yes	Yes
User	No	NA	No	No
User Limited	No	NA	No	No
Respondent	No	NA	No	No
Reviewer	No	NA	No	No
Project Manager	No	NA	No	No
Policy Manager Collaborator	No	NA	No	No
Policy Manager	No	NA	No	No
Non-System User	NA	NA	NA	NA
DPM Limited	No	NA	No	No
Data Privacy Manager Collaborator	No	No	No	No
Data Privacy Manager	No	NA	No	No
Privacy Expert	Yes	No	No	No

Tasks

AAA Role	Permissions
	Create Manual Tasks	Create Remediation Tasks	Mark Complete as Task Creator	Mark Complete as Task Assignee
Admin	Yes in any state	Yes in any state	Yes in any state	Yes in any state
User	Yes in any state	Yes in any state	Yes in any state	Yes in any state
User Limited	Yes	Yes	Yes in any state	Yes
Respondent	No	No	Yes in any state	No
Reviewer	Yes in any state	Yes in any state	Yes in any state	Yes in any state
Project Manager	Yes in any state	Yes in any state	Yes in any state	Yes in any state
Policy Manager Collaborator	Yes in any state	Yes in any state	Yes in any state	Yes in any state
Policy Manager	Yes in any state	Yes in any state	Yes in any state	Yes in any state
Non-System User	NA	NA	NA	NA
DPM Limited	Yes in any state	Yes in any state	Yes in any state	Yes in any state
Data Privacy Manager Collaborator	Yes in any state	Yes in any state	Yes in any state	Yes in any state
Data Privacy Manager	Yes in any state	Yes in any state	Yes in any state	Yes in any state
Privacy Expert	Yes in any state	Yes in any state	Yes in any state	Yes in any state

Participant

The tables below define what the Participant can do if assigned with a particular AAA role.

Assessment List Page

AAA Role	Permissions
	Create / Clone Assessment	Delete Assessment
Admin	Yes	Yes
User	Yes	No
User Limited	No	No
Respondent	No	No
Reviewer	Yes	No
Project Manager	Yes	No
Policy Manager Collaborator	Yes	No
Policy Manager	Yes, but can clone only	No
Non-System User	NA	NA
DPM Limited	Yes	No
Data Privacy Manager Collaborator	Yes	Yes
Data Privacy Manager	Yes	Yes
Privacy Expert	Yes	No

Edit Assessment Page

AAA Role	Permissions
	Edit Assessment Information	Add, Edit, or Delete Comments/Attachments	Add, Delete, or Replace Approver
Admin	Yes in any state except Approved	No	No
User	No	No	No
User Limited	No	No	No
Respondent	No	No	No
Reviewer	No	No	No
Project Manager	No	No	No
Policy Manager Collaborator	No	No	No
Policy Manager	No	No	No
Non-System User	NA	NA	NA
DPM Limited	No	No	No
Data Privacy Manager Collaborator	No	No	No
Data Privacy Manager	No	No	No
Privacy Expert	No	Yes	Yes

AAA Role	Permissions
	Add Participants	Add Data Record	Add Tags	Add Labels
Admin	Yes	Yes	Yes	Yes
User	No	NA	No	No
User Limited	No	No	No	No
Respondent	No	NA	No	No
Reviewer	No	No	No	No
Project Manager	No	NA	No	No
Policy Manager Collaborator	No	NA	No	No
Policy Manager	No	NA	No	No
Non-System User	NA	NA	NA	NA
DPM Limited	No	NA	No	No
Data Privacy Manager Collaborator	NA	NA	No	No
Data Privacy Manager	NA	NA	No	No
Privacy Expert	Yes	No	No	No

Assessment Summary Page

AAA Role	Permissions
	Edit Assessment Information	Add, Edit, or Delete Comments/Attachments	Add, Delete, or Replace Approver
Admin	Yes, but can only edit assessment labels, participants, and comments	Yes	Yes
User	Yes, but can only edit labels until In Review state; comments/attachments any state	Yes	No
User Limited	Yes	Yes	No
Respondent	Yes, but can only edit comments and attachments	Yes	No
Reviewer	Yes, but can only edit labels until In Review state; comments/attachments any state	Yes	No
Project Manager	Yes, but can only edit labels until In Review state; comments/attachments any state	Yes	Yes
Policy Manager Collaborator	Yes, but can only edit labels until In Review state; comments/attachments any state	Yes	No
Policy Manager	Yes, but can only edit labels until In Review state; comments/attachments any state	Yes	No
Non-System User	NA	NA	NA
DPM Limited	Yes, but can only edit labels until In Review state; comments/attachments any state	Yes	No
Data Privacy Manager Collaborator	Yes	Yes	No
Data Privacy Manager	Yes, but can only edit comments and attachments	Yes	No
Privacy Expert	Yes in any state except Approved	Yes	Yes

AAA Role	Permissions
	Add Participants	Add Data Record	Add Tags	Add Labels
Admin	Yes	Yes	Yes	Yes
User	No	NA	No	No
User Limited	No	NA	No	Yes, only from Not Started to In Progress states
Respondent	No	NA	No	No
Reviewer	No	No	No	No
Project Manager	No	NA	No	No
Policy Manager Collaborator	No	NA	No	No
Policy Manager	No	NA	No	No
Non-System User	NA	NA	NA	NA
DPM Limited	No	NA	No	No
Data Privacy Manager Collaborator	NA	NA	No	No
Data Privacy Manager	NA	NA	No	No
Privacy Expert	Yes	No	No	No

Tasks

AAA Role	Permissions
	Create Manual Tasks	Create Remediation Tasks	Mark Complete as Task Creator	Mark Complete as Task Assignee
Admin	Yes in any state	Yes in any state	Yes in any state	Yes in any state
User	Yes in any state	Yes in any state	NA	Yes in any state
User Limited	Yes	Yes	Yes in any state	Yes
Respondent	No	No	Yes in any state	No
Reviewer	Yes in any state	Yes in any state	Yes in any state	Yes in any state
Project Manager	Yes in any state	Yes in any state	No	Yes in any state
Policy Manager Collaborator	Yes in any state	Yes in any state	No	Yes in any state
Policy Manager	Yes in any state	Yes in any state	NA	Yes in any state
Non-System User	NA	NA	No	NA
DPM Limited	Yes in any state	Yes in any state	No	Yes in any state
Data Privacy Manager Collaborator	Yes in any state	Yes in any state	No	Yes in any state
Data Privacy Manager	Yes in any state	Yes in any state	No	Yes in any state
Privacy Expert	Yes in any state	Yes in any state	Yes in any state	Yes in any state

TrustArc  ·  AAA Roles and Permissions — All Assessment Roles  ·  https://www.trustarc.com