Stealth travel - Concepts and management

TABLE OF CONTENTS

• Overview
• Typical use cases for stealth travel
• What data and activity is protected by Stealth travel?
  • Illustrative example
  • Who can access Stealth travelers?
• To enable Stealth travel 
  • Designate which travelers are stealth travelers
  • Create the Stealth Administrator group
    • Assign roles and scopes to the Stealth Administrator group
    • Assign the relevant administrators to the Stealth Administrator group
  • Create the Stealth Agent group
    • Assign roles and scopes to the Stealth Agent group
    • Assign the relevant agents to the Stealth Agent group
  • Create the Stealth Arrangers group
    • Assign roles and scopes to the Stealth Company Arranger group
    • Assign the relevant arrangers to the Stealth Arranger group
• Related topics

Overview

Stealth travel is a platform feature that allows you to restrict the ability to view and act on the travel activity and user profiles of specific travelers to just a select group of administrators, arrangers, and agents. All other users in the system (other than the groups that have been granted access) will not see any information or activity related to these stealth travelers. The purpose of this feature is to limit who can see the activities of the stealth travelers to just the users who support them directly. For all other users, it will be as if these travelers don’t exist in the system. 

• Standard administrators, agents, and arrangers will not see any indication that stealth travelers exist. 

• Only designated administrators, agents, and arrangers with stealth access can view and manage these stealth travelers.

Typical use cases for stealth travel

Since the travel activities of certain individuals can potentially reveal sensitive business plans and agendas, the Stealth travel feature help protect a company in the following scenarios:

• Executive and leadership travel - Protect C-suite travel and schedules from visibility within the company or to agents not designated to support them. 

• Special projects and M&A activity - Keep sensitive deals confidential until announced.

• Security and protective services - Shield the movements and activities of security teams.

• Need-to-know compliance - Enforce data privacy requirements by limiting access to travel data.

What data and activity is protected by Stealth travel?

When a traveler is designated as a stealth traveler, the following types of data and travel activities are no longer visible to unauthorized users.

Illustrative example

Assume your company has 100 normal travelers and 5 C-suite executives who are designated as stealth travelers. 

• A regular company administrator will be able to see 100 users on the Users page and see that there is 1 million USD in travel spend in various analytics reports. 

• A stealth administrator will be able to see all 105 users and see a total of 1.5 million USD in total travel spend (the additional $500K coming from stealth travelers). 

• Regular TMC agents will see tasks from the 100 standard travelers, while stealth agents see tasks from all 105.

Who can access Stealth travelers?

Your company administrator will designate the specific users who will have access to stealth travelers and their data in the system. Each user who has access to your stealth travelers will have one of the following roles. These roles and the users who are granted them are managed by using the roles and permissions procedures (in the To enable Stealth travel section).  

Note: Companions of stealth travelers are automatically granted stealth status. This preserves confidentiality for companion bookings as well.

To enable Stealth travel 

To enable stealth travel, you must create several user groups and then assign specific roles (described below) to those groups. In addition, you must define the scopes those roles will have access to and then assign the relevant users to the stealth groups you create. This process is outlined below. Company Administrators and TMC Administrators manage stealth access directly in the Spotnana Online Booking Tool. 

Note: The majority of the tasks in this section are completed from the Groups and roles page. That page is accessed by selecting People from the Program menu, then selecting the relevant company, then selecting Groups and roles from the People menu on the left. The procedures assume you are on the Groups and roles page. 

Designate which travelers are stealth travelers

Designate the travelers in your organization who are stealth travelers (e.g., Executives, C-suite) by setting the Stealth_type_1, Stealth_type_2, and Stealth_type_3 fields in your HR feed. Each traveler can only be a member of one stealth category. The stealth types can be used to represent any travelers you desire (e.g., Stealth_type_1 = C-suite users, Stealth_type_2 = M&A analysts).  

Create the Stealth Administrator group

Create the group that will be used to grant the necessary permissions to the stealth administrators. 

1. Click Create group. The Create group modal is displayed.

2. Enter a name and description for your Stealth administrator group (e.g., Stealth Administrators).

3. Click Create. The group will be created.

Assign roles and scopes to the Stealth Administrator group

Designate the roles and scopes for the Stealth Administrators in your organization. Assign the following roles to your stealth administrator group and set the scopes accordingly. 

1. Select the Roles and scopes tab (for the Stealth Administrator group).

2. Click Assign role. The Assign role modal will appear. 

3. Select User Profile Administrator, Trip Administrator, Reporting Administrator, User Management Administrator, and Access Management Administrator from the Select roles menu. 

4. Set 2 scopes:

   1. If Organization is one of [CLIENT COMPANY]

   2. If Stealth type is one of Stealth type 1 and/or Stealth type 2 and/or Stealth type 3

5. Click Assign.

Assign the relevant administrators to the Stealth Administrator group

1. Select the Members tab (for the Stealth Administrator group). 

2. Click Add members. Select Add manually. The Add members modal will appear.

3. Use the search function to locate and select the desired users. You can repeat this for more than one user. 

4. When you have selected all the users you wish to add to the group, click Add. The users will be added to the group. 

Create the Stealth Agent group

Create the group that will be used to grant the necessary permissions to the stealth agents. 

1. Click Create group. The Create group modal is displayed.

2. Enter a name and description for your Stealth agent group (e.g., Stealth Agents).

3. Click Create. The group will be created.

Assign roles and scopes to the Stealth Agent group

Designate the roles and scopes for the Stealth Agents in your organization. Assign the following roles to your stealth agent group and set the scopes accordingly. 

1. Select the Roles and scopes tab (for the Stealth Agent group).

2. Click Assign role. The Assign role modal will appear. 

   1. Select User Profile Administrator, Trip Administrator, User Management Administrator, and Agent from the Select roles menu. 

      1. Set 2 scopes:

         1. If Organization is one of [CLIENT COMPANY]

         2. If Stealth type is one of Stealth type 1 and/or Stealth type 2 and/or Stealth type 3

      2. Click Assign.

3. Click Assign role. The Assign role modal will appear. 

   1. Select TMC Settings Administrator (Read Access Only) from the Select roles menu. 

      1. Set 2 scopes:

         1. If Organization is one of [YOUR TMC]

         2. If Stealth type is one of Stealth type 1 and/or Stealth type 2 and/or Stealth type 3

      2. Click Assign.

Assign the relevant agents to the Stealth Agent group

1. Select the Members tab (for the Stealth Agent group). 

2. Click Add members. Select Add manually. The Add members modal will appear.

3. Use the search function to locate and select the desired users. You can repeat this for more than one user. 

4. When you have selected all the users you wish to add to the group, click Add. The users will be added to the group. 

Create the Stealth Arrangers group

Create the group that will be used to grant the necessary permissions to the stealth arrangers. 

1. Click Create group. The Create group modal is displayed.

2. Enter a name and description for your Stealth agent group (e.g., Stealth Arrangers).

3. Click Create. The group will be created.

Assign roles and scopes to the Stealth Company Arranger group

Designate the roles and scopes for the Stealth Company Arrangers in your organization. Assign the following roles to your stealth arranger group and set the scopes accordingly. 

1. Select the Roles and scopes tab (for the Stealth Company Arranger group).

2. For each role, click Assign role. The Assign role modal will appear. 

   1. Select User Profile Administrator and Trip Administrator from the Select roles menu. 

      1. Set 2 scopes:

         1. If Organization is one of [CLIENT COMPANY]

         2. If Stealth type is one of Stealth type 1 and/or Stealth type 2 and/or Stealth type 3

      2. Click Assign.

   2. Select Event Management Administrator from the Select roles menu. 

      1. Set 1 scope:

         1. If Organization is one of [CLIENT COMPANY]

      2. Click Assign.

Assign the relevant arrangers to the Stealth Arranger group

1. Select the Members tab (for the Stealth Arranger group). 

2. Click Add members. Select Add manually. The Add members modal will appear.

3. Use the search function to locate and select the desired users. You can repeat this for more than one user. 

4. When you have selected all the users you wish to add to the group, click Add. The users will be added to the group. 

Related topics

• Role, group, and permissions management and access controls (RBAC)
• Upload user profile records