When an Account is created, it is assigned to a general permission profile. This profile will automatically include all documents marked as Public or Restricted. If there are further documents to which you want to grant a specific Account access that are not granted to others, you will create a custom permission profile.

Similarly, permission profiles allow organizations to grant specific accounts access to a subset of documents instead of all content contained within a Trust Center.

It is important to determine if Permission Profiles are the right choice for an organization. If documentation is currently shared cohesively across all customers, then Permission Profiles could complicate access rather than streamline it.

Permission Profiles are most useful in the following scenarios:

The default profile already created is called General Access. This profile has access to all documents (besides Restricted Hidden items) and is continuously updated to cover all documentation in your security portal. This profile cannot be edited.

To add a new permission profile, follow these steps:

Select the most commonly used permission profile as the default permission profile.

Adding a New Account to a Permission Profile

Editing an Account's Permission Profile

When approving an access request to the Trust Center, select the desired Permission Profile for the Account.
​

The default permission profile will automatically appear as the selected option, but there is an option to change which permission profile an account is assigned by using the dropdown.

If an account needs access to more than one permission profile, simply select each one they will need in the dropdown menu.
​

If an account has been approved but they were assigned the wrong permission profile or needs additional access to more permission profiles:

Option 1: Navigate to a particular account's profile in the Accounts tab

Option 2: Navigate to the Settings tab, then to the Permission Profile section. Select a specific profile, then scroll to the bottom to see all Accounts that are in that profile

There are actually three different settings within SafeBase that all play a role in what a visitor is able to see and that you want to adjust to achieve the desired end result. They are:

It is important to remember that permission profiles apply to documents, and not items. Even if you set the item's Access toggle to "Hide unless access granted," if there is no document linked to that item, you will not be able to select that item for inclusion within a permission profile. Hence, in this scenario, it would be possible to prevent any visitor with any access level from seeing that item. The remediation is to either link a document to that item and include it in a permission profile, or turn the "Hide unless access granted" toggle off.

Further, consider the following setup:

This item and its details will be visible to all visitors regardless of access level.

A common item where this question comes up is the Subprocessors item within the Legal card. There, the Subprocessors list is part of the item and is not treated like a document. While possible, it is not common to link a document to the Subprocessors item. Therefore, the above settings would also allow the full Subprocessors table to be seen by all visitors. The correct way to restrict the Subprocessors list to only those who have been granted access is as follows: