Business Process Security Policy

Each business process type has its own security policy. It is in these business process security policies that one can configure which security groups can, for example, initiate the business process, perform allowed actions, or approve, rescind, or cancel an event.
The business process security policy allows to configure the following types of permissions:

• Who Can Start the Business Process (including what actions initiate the business process)
• Who Can Do Action Steps in the Business Process 
• Who Can Do Actions on Entire Business Process
• Who Can View All 
• Who Can Approve
• Who Can Cancel 
• Who Can Rescind 
• Who Can Manually Advance 
• Who Can Deny

Domain in Workday Security

Domains are collections of items that share the same security. These items can include tasks, delivered reports, report data sources, and web service operations. Workday determines the secured items within each domain. You cannot change what delivered items are in what domains. Note that a given item may be in more than one domain.

Domains contain securable items that require either view or modify permissions in order to access the item. A security group can be granted with view only access or with view and modify permissions to a given domain security policy.
• View-only access grants users permission to only the domain items designated with “View” as the permission required. These items are typically reports and reporting item
such as data sources and report fields. Security groups with view-only permissions cannot access any domain items that require modify permissions.
• Modify permissions grant users access to the “Modify” permission items as well as the “View” permission items. Security groups with modify permissions, therefore, have
access to all of the domain items.

Integration System Security Group (ISSG)

Only an ISU can be assigned as a member of Integration System Security Group. Integration system users are manually assigned as members to an integration system security group (ISSG).Integration system security groups can be constrained or unconstrained. The constrained group type enables you to filter data results contextually based on organization.

Integration System User (ISU)

An integration system user (ISU) is a system-representing account used to access web service tasks required by an integration system. An ISU does not represent a person and does not typically access the user interface. The ISU is assigned to an integration system and is included as a member of an integration system security group with permissions to the relevant security policies. An ISU typically has a one-to-one relationship with an integration system.

Dashboard

Workday allows creating custom dashboards from the Maintain Dashboards tasks.

After defining the dashboard settings, configure the content for the custom dashboard. Determine which worklets should be on the dashboard and which security groups should have access to each worklet.

Prompt Sets

Prompt sets configured at the dashboard level provide an enhanced user experience and allow for flexibility with report deployment. Prompt field values set at the dashboard level apply to the worklets configured for the dashboard, allowing the user to view data across all worklets with one prompt set.

After defining the dashboard settings, configure the content for the custom dashboard. Determine which worklets should be on the dashboard and which security groups should have access to each worklet.

When configuring content for a custom dashboard with prompt sets, one can only configure required (not recommended) worklets. Dashboard users are not able to add or remove worklets from a dashboard that uses a prompt set.

Additionally, the dashboard creator or a user with the appropriate security must Map Prompts to specify from where the worklet prompts should get their values.

The options for mapping prompts are as follows:

• Use value from dashboard prompt
• Use default value from worklet
• Specify default value
• Determine default value at runtime

Worklets

Workday provides users quick access to frequently used frequently referenced data and tasks common to a specific functional area. Workday custom reports can be enabled as worklets for use on landing pages and dashboards, allowing users quick access to key reports and analytics.Advanced, Matrix, nBox, Transposed, Trending, and Composite report types can be enabled as worklets, while Search and Simple report types cannot.
A report must be enabled as a worklet before it can be added to a dashboard or landing page. To enable a custom report as a worklet, go to the Output tab of the report definition and configure the Worklet Options.

While configuring custom reports as Worklet please note of the following.

• Prompts : Configure prompts default.
• Space : Use chars, sorts and filter
• Performace : Use indexed data source

Worklets must be designed to load in less than 30 seconds or else they will not render on a landing page or dashboard.

Maintain Religions

Each country has its own set of religions. Maintain Religions task allows adding religions for a country that a worker has option to select.

Select the country for which religions need to be added.

Click on the plus icon to added the religion.

How to Pause/Suspend an Integration

Search for the scheduling process under the report/task Schedule Future processes.

Under the Scheduled Processes search for the integration and click on Related Action >Schedule Future Process>Suspend

This will pause all future scheduled processes for the integration. In case the suspended integration needs to be triggered again select Activate under the same path to reactivate future processes.

Delegation

Administrator and other authorized users can grant/manage delegation for other workers through the task Manager Delegation Settings.

An administrator needs to select the worker for whom they want to setup Delegation. Click on Request Delegation Change button and add the details like start date, end date, to whom it needs to be a delegation , what are the business process for whom delegation need to set up and any process where the delegation can initiate the task