CBAM new guide for non-EU operators to delegate access to employees

On April 1, 2026, the European Commission published a new guidance document titled "User Guide for the Delegation of Access Rights to Employees Procedure for the Non-EU companies in the CBAM Third Countries Operators Portal". Originally finalized on March 27, 2026 (Version 2.00 EN), this manual provides detailed instructions for delegating access rights to employees within the CBAM Registry.

Purpose and Scope

Non-EU companies intending to become Carbon Border Adjustment Mechanism (CBAM) Operators of Third Countries Installations (O3CI) need access to the CBAM Phase 3 Registry. This access enables them to voluntarily register and report information concerning their company, installations, and specific production process emissions. The newly released guide provides the exact step-by-step procedure for granting, modifying, and revoking this registry access for their employees.

The EU Access Admin-Ext Tool

To securely manage employee access, Third Country Operator (TCO) administrators are required to use a tool provided by the European Commission called "EU Access Admin-Ext". This interface empowers the TCO administrator to create mandates that grant specific access rights to TCO employees on behalf of the company. The decision to delegate these rights rests entirely with the TCO, and the European Commission plays no role in this internal authorization process.

Prerequisites for Delegation

Before a TCO administrator can successfully delegate access to an employee via the EU Access Admin-Ext tool, three specific prerequisites must be met:

• The European Commission must have accepted the TCO's registration request for the O3CI portal.

• The TCO administrator must have explicitly requested the right to delegate access during the registration process and received email confirmation granting access to the EU Access Admin-Ext tool.

• The target employee must have successfully created an EU Login account.

Managing Business Profiles and Mandates

When creating a mandate to delegate access, administrators can assign specific business profiles to employees, which define their operational capabilities within the portal. The guide strongly recommends assigning both of the following roles to the mandated employee:

• Admin Operator (BP_ADMIN_OPERATOR): This profile allows the user to submit formal requests directly to the European Commission, such as registration requests, changes, or revocations.

• Simple Operator (BP_SIMPLE_OPERATOR): This profile allows the user to fill in and save a request in the system, but restricts them from officially submitting it to the European Commission.

A mandate is automatically populated with a maximum duration of 360 days, though the administrator can update the dates as necessary. Administrators also maintain full capability to instantly revoke a mandate (by clicking the system's "bin" icon) if an employee leaves the company or no longer requires access.

Support and Troubleshooting

If operators of third country installations encounter access management issues, they are advised to reach out to the centralized support desk at customs_support@itsmtaxud.europa.eu.

• Language: The official language for support communication is English.

• Hours: The support desk operates from 07:00 to 21:00 CET, Monday through Friday.

• Details Required: To facilitate effective troubleshooting, users must include the specific URL where the issue is occurring, a screenshot of the error, and the exact date and time the error occurred.

Find Out More: For more detailed instructions, including screenshots of the EU Access Admin-Ext interface, you can find out more and download the official guide directly from the European Commission here: User Guide for the Delegation of Access Rights to Employees Procedure (PDF).