Zendesk Permissions, Roles and Data Protection Review (Defensive)
Check who can access tickets and customer data.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it.
Review access in Zendesk as a defensive review of my own account, recommending least privilege. Do not ask for real customer data. Roles and the people assigned: [ROLES_AND_PEOPLE]. Custom roles and permissions: [CUSTOM_ROLES]. Types of personal data in tickets: [DATA_TYPES]. Retention rules and redaction practices: [RETENTION_AND_REDACTION]. Integrations: [INTEGRATIONS]. Check for admins who do not need admin rights, agents who can export data, shared accounts, former staff, integrations with broad access, tickets containing sensitive data without redaction, and unclear retention. Count the people with each risky permission and propose a reduction with the reason. Review how sensitive data is handled: redaction, deletion on request, attachments, and who can view them. Rate each by risk. Test any role change with a non-admin test user [VERIFY]. Return a table, a joiner, mover and leaver checklist (including removing the person from groups, reassigning tickets and revoking tokens), a quarterly review, a guide for agents on handling sensitive information, and questions for the administrator and privacy officer. Mark setting names [VERIFY].
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.