Tag the Tax and Revenue data model objects for portal visibility. Then create a data governance policy so that authenticated taxpayers can read their own data in the portal.
Required Editions
| View supported product editions. |
| User Permissions Needed | |
|---|---|
| To manage data model object tags: | DataCloudArchitect (ManageCdp) |
| To create data Governance policies: | DataCloudArchitect (ManageCdp) |
Before you begin, complete these setup tasks:
Ingest tax data into Data 360 before you test the configuration. See the Tax and Revenue Management Developer Guide.
Data 360 denies DMO access to non-admin users by default. Uploading tax data doesn't automatically make it visible to portal users. You must assign permissions to access the portal to community users, tag the DMOs for portal visibility, and create a Data Governance policy that explicitly allows access for authenticated external users.
Tag Data Model Objects for Portal Visibility
You can apply the default ExternalData.Visibility.Portal tag, or create your own, to each DMO and its fields so that portal users can read that data.
Repeat these steps for every DMO in this list. Apply the tag to both the object and to the individual fields that you want to expose.
- All Public Sector Tax DMOs:
-
Tax Type
-
Tax Account
-
Tax Type Period
-
Tax Filing
-
Tax Filing Line Item
-
Tax Filing Tax Account
-
Tax Filing Participant
-
Tax Filing Assessment
-
Tax Filing Assessment Line Item
-
Tax Refund
-
Tax Payment
-
Tax Document
-
Tax Document Item
-
Tax Filing Payment Instrument
-
Tax Filing Document
-
Tax Filing Assessment Document
-
Tax Filing Line Item Document
-
Tax Filing Assessment Line Item Document
-
Tax Filing Contact Point
-
- Account
- ContactPointAddress
- Individual
- PartyIdentification
- PaymentInstrument
- UnifiedAccountLink: to find this DMO, switch the Data Model view to All and search for Unified.
- Agentforce Data Library:
ADL_<DataLibraryName>__dlmADL_<DataLibraryName>_chunk__dlmADL_<DataLibraryName>_index__dlm
- From the App Launcher, find and select Data Cloud.
- Select the Data Model tab.
- Select a DMO.
- Click Manage Tags, and then click Attach Tags.
- Search for ExternalData.Visibility.Portal, or your custom tag, select the tag, and add it to the object or to the individual fields you want to make visible to portal users.
- Click Save, and then click Done.
Create a Data Governance Policy for Portal Users
Create a Data Access policy that allows authenticated external users to read Tax and Revenue DMO data.
For more information about data governance policies and field-level access control, see Create an Object or Field-Level Access Policy in Data Cloud.
This policy allows registered external users (taxpayers who have logged in to the portal) to read data from the DMOs you tagged in the previous step.
- From the App Launcher, find and select Data Cloud.
- Select the Data Governance tab, select Policies, and click New.
- Select Data Access, and then click Next.
- Enter a policy name, such as Tax and Revenue External Access.
- For Authorization Level, select Authenticated External User, and then click Next.
- Set Resource to Object, Action to Allow Access, and Take Action on to All Objects.
- Click the Users tab, and set Take Action on to All Users.
- Click Save & Activate.
To block portal users from seeing agency-internal fields, such as fraud flags or audit notes, create DENY or MASK policies for those specific fields at the Authenticated external user authorization level.