Overview
OneTrust covers privacy and IT risk management. The Automize connector works across its risk, control, assessment, incident, audit and data-inventory modules — it creates and updates risks, controls, incidents and inventory records, runs and approves assessments, and searches everything from workpapers to vendor inventory.
Setting up the connection
Auth type: OAuth 2.0 (Client Credentials).
- Get the tenant hostname, without a scheme. It is the host you sign in at — app.onetrust.com, app-eu.onetrust.com, app-de.onetrust.com, app-uk.onetrust.com, or your tenant's own.
- In OneTrust, go to Global Settings → Access Management → Client Credentials and create a credential.
- Choose its scopes there. They are fixed when the credential is created, so include every module the process touches — a scope added later needs a new credential.
- In Automize, open Settings → Connectors → OneTrust → Add connection and paste the hostname, client ID and client secret. Automize exchanges them for an access token per run.
Available operations
42 operations available. Click any row to jump to its detail.
| Operation | Category | What it does |
|---|---|---|
| Add Controls to Risk | General | Attach control implementations to a risk |
| Approve Assessment | General | Approve an assessment |
| Approve Risk | General | Approve a submitted risk |
| Create Assessment | General | Launch an assessment from a template |
| Create Assessment Risk | General | Raise a risk from within an assessment |
| Create Audit | General | Create an audit |
| Create Control | General | Create a control |
| Create Incident | General | Log an incident |
| Create Inventory Record | General | Create a record in an inventory schema |
| Create Risk | General | Create a standalone risk |
| Delete Control | General | Delete a control |
| Delete Risk | General | Delete a risk |
| Export Assessment | General | Export one assessment |
| Get Assessment Record | General | Get an assessment's full record, including responses |
| Get Assessment Results | General | List assessment results |
| Get Audit | General | Get one audit by its ID |
| Get Control Implementation | General | Get one control implementation by its GUID |
| Get Incident | General | Get one incident by its ID |
| Get Inventory Record | General | Get one inventory record by schema and ID |
| Get Inventory Schema | General | Get one inventory schema's field definitions |
| Get Risk | General | Get one risk by its ID |
| Get Risk Matrix | General | Get the tenant's risk-scoring matrix settings |
| List Assessments | General | List assessments |
| List Inventories | General | List the records of one inventory schema |
| List Inventory Schemas | General | List the inventory schemas (assets, processing activities, vendors, entities) |
| List Risk Categories | General | List the active risk categories |
| Search Audit Workpapers | General | Page through audit workpapers |
| Search Audits | General | Page through audits |
| Search Control Implementations | General | Page through control implementations |
| Search Controls | General | Page through controls |
| Search Evidence Task Implementations | General | Page through evidence task implementations |
| Search Incidents | General | Search incidents |
| Search Risks | General | Page through risks. Filter criteria go in the body; page/size/sort are query parameters |
| Search Threats | General | Page through the threat library |
| Search Vendor Inventory | General | Search the vendor inventory |
| Search Vulnerabilities | General | Page through the vulnerability library |
| Submit Assessment | General | Submit an assessment for review |
| Submit Risk | General | Submit a risk for review |
| Update Control | General | Update an existing control |
| Update Incident | General | Update an existing incident |
| Update Inventory Record | General | Update a record in an inventory schema |
| Update Risk | General | Update an existing risk |
Operations
Add Controls to Risk
Attach control implementations to a risk
| Parameter | Required | Type | Description |
|---|---|---|---|
Risk ID riskId | Yes | string |
Approve Assessment
Approve an assessment
| Parameter | Required | Type | Description |
|---|---|---|---|
Assessment ID assessmentId | Yes | string |
Approve Risk
Approve a submitted risk
| Parameter | Required | Type | Description |
|---|---|---|---|
Risk ID riskId | Yes | string |
Create Assessment
Launch an assessment from a template
No input parameters.
Create Assessment Risk
Raise a risk from within an assessment
| Parameter | Required | Type | Description |
|---|---|---|---|
Assessment ID assessmentId | Yes | string |
Create Audit
Create an audit
No input parameters.
Create Control
Create a control
No input parameters.
Create Incident
Log an incident
No input parameters.
Create Inventory Record
Create a record in an inventory schema
| Parameter | Required | Type | Description |
|---|---|---|---|
Schema name schemaName | Yes | string |
Create Risk
Create a standalone risk
No input parameters.
Delete Control
Delete a control
| Parameter | Required | Type | Description |
|---|---|---|---|
Control ID controlId | Yes | string |
Delete Risk
Delete a risk
| Parameter | Required | Type | Description |
|---|---|---|---|
Risk ID riskId | Yes | string |
Export Assessment
Export one assessment
| Parameter | Required | Type | Description |
|---|---|---|---|
Assessment ID assessmentId | Yes | string |
Get Assessment Record
Get an assessment's full record, including responses
| Parameter | Required | Type | Description |
|---|---|---|---|
Assessment ID assessmentId | Yes | string |
Get Assessment Results
List assessment results
No input parameters.
Get Audit
Get one audit by its ID
| Parameter | Required | Type | Description |
|---|---|---|---|
Audit ID auditId | Yes | string |
Get Control Implementation
Get one control implementation by its GUID
| Parameter | Required | Type | Description |
|---|---|---|---|
Implementation GUID guid | Yes | string |
Get Incident
Get one incident by its ID
| Parameter | Required | Type | Description |
|---|---|---|---|
Incident ID incidentId | Yes | string |
Get Inventory Record
Get one inventory record by schema and ID
| Parameter | Required | Type | Description |
|---|---|---|---|
Schema name schemaName | Yes | string | |
Inventory record ID id | Yes | string |
Get Inventory Schema
Get one inventory schema's field definitions
| Parameter | Required | Type | Description |
|---|---|---|---|
Schema name schemaName | Yes | string |
Get Risk
Get one risk by its ID
| Parameter | Required | Type | Description |
|---|---|---|---|
Risk ID riskId | Yes | string |
Get Risk Matrix
Get the tenant's risk-scoring matrix settings
No input parameters.
List Assessments
List assessments
No input parameters.
List Inventories
List the records of one inventory schema
| Parameter | Required | Type | Description |
|---|---|---|---|
Schema name schemaName | Yes | string |
List Inventory Schemas
List the inventory schemas (assets, processing activities, vendors, entities)
No input parameters.
List Risk Categories
List the active risk categories
No input parameters.
Search Audit Workpapers
Page through audit workpapers
| Parameter | Required | Type | Description |
|---|---|---|---|
Page (0-indexed) page | No | integer | |
Page size size | No | integer | |
Sort sort | No | string | e.g. 'name,asc' |
Search Audits
Page through audits
| Parameter | Required | Type | Description |
|---|---|---|---|
Page (0-indexed) page | No | integer | |
Page size size | No | integer | |
Sort sort | No | string | e.g. 'name,asc' |
Search Control Implementations
Page through control implementations
| Parameter | Required | Type | Description |
|---|---|---|---|
Page (0-indexed) page | No | integer | |
Page size size | No | integer | |
Sort sort | No | string | e.g. 'name,asc' |
Search Controls
Page through controls
| Parameter | Required | Type | Description |
|---|---|---|---|
Page (0-indexed) page | No | integer | |
Page size size | No | integer | |
Sort sort | No | string | e.g. 'name,asc' |
Search Evidence Task Implementations
Page through evidence task implementations
| Parameter | Required | Type | Description |
|---|---|---|---|
Page (0-indexed) page | No | integer | |
Page size size | No | integer | |
Sort sort | No | string | e.g. 'name,asc' |
Search Incidents
Search incidents
No input parameters.
Search Risks
Page through risks. Filter criteria go in the body; page/size/sort are query parameters
| Parameter | Required | Type | Description |
|---|---|---|---|
Page (0-indexed) page | No | integer | |
Page size size | No | integer | |
Sort sort | No | string | e.g. 'name,asc' |
Search Threats
Page through the threat library
| Parameter | Required | Type | Description |
|---|---|---|---|
Page (0-indexed) page | No | integer | |
Page size size | No | integer | |
Sort sort | No | string | e.g. 'name,asc' |
Search Vendor Inventory
Search the vendor inventory
No input parameters.
Search Vulnerabilities
Page through the vulnerability library
| Parameter | Required | Type | Description |
|---|---|---|---|
Page (0-indexed) page | No | integer | |
Page size size | No | integer | |
Sort sort | No | string | e.g. 'name,asc' |
Submit Assessment
Submit an assessment for review
| Parameter | Required | Type | Description |
|---|---|---|---|
Assessment ID assessmentId | Yes | string |
Submit Risk
Submit a risk for review
| Parameter | Required | Type | Description |
|---|---|---|---|
Risk ID riskId | Yes | string |
Update Control
Update an existing control
| Parameter | Required | Type | Description |
|---|---|---|---|
Control ID controlId | Yes | string |
Update Incident
Update an existing incident
| Parameter | Required | Type | Description |
|---|---|---|---|
Incident ID incidentId | Yes | string |
Update Inventory Record
Update a record in an inventory schema
| Parameter | Required | Type | Description |
|---|---|---|---|
Schema name schemaName | Yes | string | |
Inventory record ID id | Yes | string |
Update Risk
Update an existing risk
| Parameter | Required | Type | Description |
|---|---|---|---|
Risk ID riskId | Yes | string |
FAQ
- A call fails with a permission error even though the credential works elsewhere.
- Scopes are set when the client credential is created and cannot be widened afterwards. A credential minted for risk work will not reach the assessment or inventory endpoints — create a second credential with the scopes that module needs.