Collaboration permissions in the Client / Vendor Access Program by role and by action

The Client/Vendor Access Program lets users invite another company to the Bitsight platform, for example to help a third party improve its Bitsight Security Rating. A user's role determines who can assign a point of contact (POC), invite companies, manage collaboration messages, set up client registration, and view progress. This article lists the collaboration permissions for each role and for each action.

Roles referenced on this page: Users with the Admin, Group Admin, Portfolio Manager, Operations, Internal Business User, User, or View Only role.

What can my role do?

Use this section to find everything a specific role can and can't do with collaboration. For a breakdown by action instead, see By action below.

By action

Permissions key

✅ = Is permitted.

❌ = Not permitted.

➖ = Not applicable and not permitted.

Manage a point of contact for 
portfolio companies through 
the Bitsight API

✅ Admins can assign a POC for any company.

✅ Group Admins can assign a POC for companies in their own group only.

❌ Portfolio Managers and Users cannot do this.

➖ Not applicable to Internal Business Users, Operations, and View Only.
 

Invite a company to collaborate

✅ Admins, Group Admins, Portfolio Managers, and Users can do this.

➖ Not applicable to Internal Business Users, Operations, and View Only.

Please note that you must be subscribed to the recipient organization. For Vendor Risk Management and Trust Management Hub connections, see establish connections.
 

Manage collaboration messages

✅ Admins, Group Admins, Portfolio Managers, and Users can do this.

➖ Not applicable to Internal Business Users, Operations, and View Only.
 

Generate a registration page 
for clients to sign up

✅ Only Admins can do this.

❌ Group Admins, Portfolio Managers, and Users cannot do this.

➖ Not applicable to Internal Business Users, Operations, and View Only.
 

View invitations and 
collaboration progress in the 
CM app or Insurance app

✅ Admins can view invitations and progress for all companies.

✅ Group Admins, Portfolio Managers, and Users can view invitations and progress for their own group only.

➖ Not applicable to Internal Business Users, Operations, and View Only.