You are here:
Configure Taxpayer Portal Access to Tax Data
Tag the Tax and Revenue data model objects for portal visibility. Then create a data governance policy so that authenticated taxpayers can read their own data in the portal.
Required Editions
| View supported product editions. |
| User Permissions Needed | |
|---|---|
| To manage data model object tags: | DataCloudArchitect (ManageCdp) |
| To create data Governance policies: | DataCloudArchitect (ManageCdp) |
Before you begin, complete these setup tasks:
Ingest tax data into Data 360 before you test the configuration. See the Tax and Revenue Management Developer Guide.
Data 360 denies DMO access to non-admin users by default. Uploading tax data doesn't automatically make it visible to portal users. Two steps are required: tagging the DMOs for portal visibility, and creating a data governance policy that explicitly allows access for authenticated external users.
Tag Data Model Objects for Portal Visibility
Apply the ExternalData.Visibility.Portal tag to each DMO and its fields so that portal users can read that data.
Repeat these steps for every DMO in this list. Apply the tag to both the object and to the individual fields that you want to expose.
- All Tax DMOs (any DMO prefixed with "Tax")
- Account
- Individual
- PartyIdentification
- PaymentInstrument
- ContactPointAddress
- UnifiedAccountLink — to find this DMO, switch the Data Model view to All and search for Unified.
- From the App Launcher, find and select Data Cloud.
- Select the Data Model tab.
- Select a DMO.
- Click Manage Tags, and then click Attach Tags.
- Search for ExternalData.Visibility.Portal, select the tag, and add it to the object or to the indvidivual fields you want to make visible to portal users.
- Click Save, and then click Done.
Create a Data Governance Policy for Portal Users
Create a Data Access policy that allows authenticated external users to read Tax and Revenue DMO data.
For more information about data governance policies and field-level access control, see Create an Object or Field-Level Access Policy in Data Cloud.
This policy allows authenticated external users (taxpayers who have logged in to the portal) to read data from the DMOs you tagged in the previous step.
- From the App Launcher, find and select Data Cloud.
- Select the Data Governance tab, select Policies, and click New.
- Select Data Access, and then click Next.
- Enter a policy name, such as Tax and Revenue External Access.
- For Authorization Level, select Authenticated External User, and then click Next.
- Set Resource to Object, Action to Allow Access, and Take Action on to All Objects.
- Click the Users tab, and set Take Action on to All Users.
- Click Save & Activate.
To block portal users from seeing agency-internal fields, such as fraud flags or audit notes, create DENY or MASK policies for those specific fields at the Authenticated External User authorization level.
