What is Entity Management?
Run one control framework across many entities - centrally governed, locally managed.
Entity Management lets you run one control framework across many entities - subsidiaries, countries, business units, or teams - without rebuilding it for each one. The guiding principle is simple: one control framework, centrally governed and locally managed.
A global administrator builds a single control program once and attaches the relevant entities to it. Each local entity then manages its own assignments, and (as the module rolls out) sees only the data that belongs to it - so there's no unnecessary data exposure between entities while the group keeps one consistent framework. It's designed to scale, from a handful of entities to 500+.
Note! Entity Management is not enabled by default. To switch it on for your tenant, talk to your Customer Success Manager about commercial terms.
The problem it solves
Until now, the lowest level you could grant access at on the control side was the whole control program. That created two headaches at scale:
-
Data exposure - to let a local entity see its own controls, you had to grant access to the entire program, exposing every other entity's data too.
-
All-or-nothing editing - to let local teams manage their own assignments, you had to give them edit access to the whole program, risking unauthorized changes to tasks, scheduling, and design.
Many organizations worked around this by copying the same control program once per entity, or by separating entities with assignment tags (https://support.impero.com/knowledge/tag-responsible-users) - both of which get unwieldy past a few dozen entities.
Entity Management adds a new entity-level layer of access on top of the control program, so you can grant access by entity, not just by program.
What counts as an entity?
An entity is any organizational unit that needs its own control execution or data separation - most often a legal entity, but you define what it represents. You can also describe each entity with identifiers like company, country, region, or whether it's part of a shared service.
What you can do today
Create entities and assign access. Build your entities and give users Admin, Edit, or View access per entity.
Attach entities to control programs. Once an entity is attached to a program, anyone with Edit access to that entity can manage assignments within that program - but only for their own entity.
Delegate assignment management locally. Local teams can change who performs and reviews a control for their entity, without being able to touch the control's frequency, tasks, or design. That removes the "please reassign this control" emails to the central admin.