Jump to main content

# Manage Assumptions

## Permissions and Descriptions

The "Manage Assumptions" default role for accounts created after the November 2017 deployment will migrate to contain the following permission (in Bold) after the January 2018 deployment.

Default Permission | Permission Group | Description
--- | --- | ---
Assign or Remove Permissions for ComplianceOne® assumptions | ComplianceOne® assumptions | Allows an Account Administrator to assign or remove permissions for ComplianceOne® assumptions. This permission works in combination with other Security Administration permissions (i.e. remove user from an account). It was created to prevent collisions for Accounts with more than one product. Example: An account is licensed for Product A and Product B. There are users in the Account for Product A and Product B. An Account Administrator for Product A needs to remove a user. There are users in the list for both Product A and Product B. If the Account Administrator has the Assign or Remove Permissions for Product A and Assign or Remove Permissions for Product B, the Administrator can remove a user that has permissions for Product A and/or Product B. If the Account Administrator has the Assign or Remove Permissions for Product A only, the Administrator can only remove the users that have permission for Product A, and they are not allowed to remove a user that has Product B permissions.
Basic Access for ComplianceOne® assumptions | ComplianceOne® assumptions | This permission is not used by ComplianceOne® assumptions.
Manage Administration for ComplianceOne® assumptions | ComplianceOne® assumptions | Allows an Account Administrator to access Administration.
Manage Template and Policy Group Administration for ComplianceOne® assumptions | ComplianceOne® assumptions | Allows an Account Administrator to create, edit, copy and delete templates and policy group configurations (Administration).

The "Manage Assumptions" default role for accounts created prior to the November 2017 deployment will migrate to contain the following permissions (in Bold) after the January 2018 deployment.

Default Permission | Permission Group | Description
--- | --- | ---
Assign or Remove Permissions for ComplianceOne® assumptions | ComplianceOne® assumptions | Allows an Account Administrator to assign or remove permissions for ComplianceOne® assumptions. This permission works in combination with other Security Administration permissions (i.e. remove user from an account). It was created to prevent collisions for Accounts with more than one product. Example: An account is licensed for Product A and Product B. There are users in the Account for Product A and Product B. An Account Administrator for Product A needs to remove a user. There are users in the list for both Product A and Product B. If the Account Administrator has the Assign or Remove Permissions for Product A and Assign or Remove Permissions for Product B, the Administrator can remove a user that has permissions for Product A and/or Product B. If the Account Administrator has the Assign or Remove Permissions for Product A only, the Administrator can only remove the users that have permission for Product A, and they are not allowed to remove a user that has Product B permissions.
Basic Access for ComplianceOne® assumptions | ComplianceOne® assumptions | This permission is not used by ComplianceOne® assumptions.
Manage Administration for ComplianceOne® assumptions | ComplianceOne® assumptions | Allows an Account Administrator to access Administration.
Manage Template and Policy Group Administration for ComplianceOne® assumptions | ComplianceOne® assumptions | Allows an Account Administrator to create, edit, copy and delete templates and policy group configurations.
Add User to Account | Security Administration | Allows an Account Administrator to add users to an account.
Assign or Remove Permissions for Security Administration | Security Administration | Allows an Account Administrator to assign or remove permissions in Security Administration.
Basic Access for Security Administration | Security Administration | Allows a user to have basic access to Security Administration.
Clone Account | Security Administration | Allows an Account Administrator to copy an account to create additional accounts.
Edit Account | Security Administration | Allows an Account Administrator to manage account information.
Edit Account Roles | Security Administration | Allows an Account Administrator to edit account roles in an account.
Edit Account User | Security Administration | Allows an Account Administrator to edit account users in an account.
Remove User from Account | Security Administration | Allows an Account Administrator to remove users in an account.
Reset Account User Password | Security Administration | Allows an Account Administrator to reset an account user password in an account.
Unlock Account User | Security Administration | Allows an Account Administrator to unlock a user in an account.
View Account Roles | Security Administration | Allows an Account Administrator to view account roles in an account.
View Account User | Security Administration | Allows an Account Administrator to view account users in an account.