---
schema_version: "1"
id: d3ede9826596687e4a0b0adfce5fc27ba5df18f580d153870d95ed902e43cc8c
title: Configure Taxpayer Portal Access to Tax Data
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/ind/264-0-0/aps_tr_configure_portal_data_access.md
canonical_url: https://help.salesforce.com/s/articleView?id=ind.aps_tr_configure_portal_data_access.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: a353bd158211afe6300dcdd5eb49f671392874872829cb3f7b9bc1bbfa9e7d66
description: Tag the Tax and Revenue data model objects for portal visibility. Then create a data governance policy so that authenticated taxpayers can read their own data in the portal.
products:
  - Public Sector
release: "264"
---
# Configure Taxpayer Portal Access to Tax Data

Tag the Tax and Revenue data model objects for portal visibility. Then create a data governance policy so that authenticated taxpayers can read their own data in the portal.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;"><a href="https://help.salesforce.com/s/articleView?id=ind.psc_supported_editions.htm&amp;release=264.0.0&amp;type=5" title="Learn about the editions, user interfaces, and add-ons that support Public Sector.">View supported product editions</a>.</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d123249e60">User Permissions
              Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d123249e60 ">To manage data model object tags:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d123249e60 ">DataCloudArchitect (ManageCdp)</td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d123249e60 ">To create data Governance policies:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d123249e60 ">DataCloudArchitect (ManageCdp)</td>

          </tr>
        </tbody>
      </table>

Before you begin, complete these setup tasks:

- [Assign Tax and Revenue Permissions to Internal Users](https://help.salesforce.com/s/articleView?id=ind.aps_tr_assign_permissions.htm&release=264.0.0&type=5 "Confirm that internal admins have Customize Application, and assign Data Cloud Architect to users who configure Data 360.")
- [Set Up Tax and Revenue](https://help.salesforce.com/s/articleView?id=ind.aps_tr_set_up_tax_and_revenue.htm&release=264.0.0&type=5 "Turn on the Tax and Revenue org preference, use the default data space or create one for tax data. Then select that data space in Tax and Revenue Settings. Enable person accounts and set up security for taxpayer identification.")

Ingest tax data into Data 360 before you test the configuration. See the [Tax and Revenue Management Developer Guide](https://developer.salesforce.com/docs/atlas.en-us.psc_api.meta/psc_api/aps_tr_data_model_reference.htm).

Data 360 denies DMO access to non-admin users by default. Uploading tax data doesn't automatically make it visible to portal users. You must assign permissions to access the portal to community users, tag the DMOs for portal visibility, and create a Data Governance policy that explicitly allows access for authenticated external users.

## Tag Data Model Objects for Portal Visibility

You can apply the default ExternalData.Visibility.Portal tag, or create your own, to each DMO and its fields so that portal users can read that data.

Repeat these steps for every DMO in this list. Apply the tag to both the object and to the individual fields that you want to expose.

- All Public Sector Tax DMOs:
    - Tax Type
    - Tax Account
    - Tax Type Period
    - Tax Filing
    - Tax Filing Line Item
    - Tax Filing Tax Account
    - Tax Filing Participant
    - Tax Filing Assessment
    - Tax Filing Assessment Line Item
    - Tax Refund
    - Tax Payment
    - Tax Document
    - Tax Document Item
    - Tax Filing Payment Instrument
    - Tax Filing Document
    - Tax Filing Assessment Document
    - Tax Filing Line Item Document
    - Tax Filing Assessment Line Item Document
    - Tax Filing Contact Point
- Account
- ContactPointAddress
- Individual
- PartyIdentification
- PaymentInstrument
- UnifiedAccountLink: to find this DMO, switch the Data Model view to **All** and search for Unified.
- Agentforce Data Library:
    - `ADL_<``_DataLibraryName>__dlm_`
    - `ADL_<``_DataLibraryName>_``_chunk__dlm`
    - `ADL_<``_DataLibraryName>__``index__dlm`

1. From the App Launcher, find and select **Data Cloud**.
2. Select the **Data Model** tab.
3. Select a **DMO**.
4. Click **Manage Tags**, and then click **Attach Tags**.
5. Search for ExternalData.Visibility.Portal, or your custom tag, select the tag, and add it to the object or to the individual fields you want to make visible to portal users.
6. Click **Save**, and then click **Done**.

## Create a Data Governance Policy for Portal Users

Create a Data Access policy that allows authenticated external users to read Tax and Revenue DMO data.

For more information about data governance policies and field-level access control, see [Create an Object or Field-Level Access Policy in Data Cloud](https://help.salesforce.com/s/articleView?id=data.c360_a_create_ols_fls_policy.htm&type=5&language=en_US).

This policy allows registered external users (taxpayers who have logged in to the portal) to read data from the DMOs you tagged in the previous step.

1. From the App Launcher, find and select **Data Cloud**.
2. Select the **Data Governance** tab, select **Policies**, and click **New**.
3. Select **Data Access**, and then click **Next**.
4. Enter a policy name, such as Tax and Revenue External Access.
5. For Authorization Level, select **Authenticated External User**, and then click **Next**.
6. Set Resource to **Object**, Action to **Allow Access**, and Take Action on to **All Objects**.
7. Click the **Users** tab, and set Take Action on to **All Users**.
8. Click **Save & Activate**.

To block portal users from seeing agency-internal fields, such as fraud flags or audit notes, create DENY or MASK policies for those specific fields at the Authenticated external user authorization level.