Adding Tags to Permissions

​

Why this matters

Apps can have dozens, hundreds, or thousands of permissions with different naming conventions, which makes it difficult to know which ones are high-risk or in scope for audits. Permission Tags let you categorize permissions so that you can:

• Scope Reviews quickly and accurately - select tags to scope the associated permissions into the review instead of selecting them one by one
• Give Reviewers context - make it obvious which permissions carry privilege or compliance relevance
• Support audit clarity - show which tags (and associated entitlements) were included when defining review scope

Available tags:

• SOC2
• SOX
• ISO27001
• PCI
• HITRUST
• Privileged (see details here)

​

1. Navigate to the Apps table > Single App > Permissions Tab

​

2. Add Tags to Permissions

Why am I already seeing the Privileged Tag on some of my Permissions? See here. Navigate to the Tags column for a specific permission Click on Add Select one or more Tags from the options Click Apply View added Tags Hover over Tags to see the Edit button Click on the Edit button to add/remove tags

​

3. Add Tags to Permissions in bulk

Multi-select Permissions to add Tags in bulk Click on the Tags drop down to add Tags to the selected Permissions Select Tags to add to Permissions Click Apply Tags applied in bulk will be added to the existing Tags for the selected Permissions. They will not replace existing Tags.

​

3. Add Tags to Permissions via CSV upload

Download CSV via the CSV download icon Update the CSV file with relevant Tags. For multiple Tags, separate with a comma Click on Enrich Permissions to upload the updated CSV Select the appropriate CSV file (max size of 10 MB supported) Map your CSV columns and specify the delimiter used The Permission ID column is required. Learn more about Permission Display Names and Descriptions Adding Permission Display Names and Descriptions Confirm that permissions should be updated. Tags in the CSV will overwrite applied Tags in the Table

​

Scoping Access Reviews using Tags

See Choosing Access Review Appsand Scoping Your Access Review

​

Privileged Tag

• Lumos will auto-add the Privileged tag to Permissions where it detects keywords like "Admin", "SuperUser", or "Super User"
• You can manually remove this Tag and can manually add it to Permissions
• Once it is manually removed from a Permission, it will not be auto re-added to that Permission
• The Privileged Tag from the Permissions tab will be reflected in the Categories column in the Access Review. See Understanding Categories in the Access Review

If you’d like this Privileged Tag feature turned off, please reach out to Lumos Support To turn Privileged Tag feature off, add customer’s domain to FF: fis-tag-privileged-entitlements