Steps: Set Up Security for Adaptive Planning with HCM and Financials

Set up security to determine who can:

Configure your tenants for synced user access and shared Workday data and metadata.

Access Workday Adaptive Planning using their Workday credentials.

Create, edit, and view plan structures and plan templates.

Initiate plan publishing from Adaptive Planning.

Create positions from published workforce plans.

Create headcount plans from planning configuration managers, control headcount planning events, and participate in the planning process by entering position data. For more information about feature and security setup for headcount planning, see Steps: Set Up Headcount Planning.

Access the

Maintain Functional Areas

task.

Select the

Enabled

check box for these functional areas:

Adaptive Planning

Adaptive Planning for Financial Plans

Adaptive Planning for the Workforce

To publish financial plans, you also need to enable the Budgets functional area.

Security: Security Configuration
in the System functional area.

Create Segment-Based Security Groups.

To publish plans and access the plans in Financials or HCM, create segment-based security groups for users who need access financial, headcount, or workforce plans using these values:

Option	Bezeichnung
Security Groups	Add the security groups who need access. For financial planning, you might already have an existing segment-based security group set up to access financial plans. You don't need to create another.
Access to Segments	Select: Financial Plan Type Segment Headcount Plan Type Segment

Edit Domain Security Policies.

Depending on the features you want to use, configure the domain security policies for these domains:

Access Adaptive Planning
in the Adaptive Planning functional area.

Access Plan Type (Segmented)
in the Adaptive Planning for Financial Plans functional area and Adaptive Planning for the Workforce functional area.

Adaptive Planning Integration
in the System functional area.

Participate: Headcount Planning
domain in the Adaptive Planning for the Workforce functional area.

Process: Headcount Planning
domain in the Adaptive Planning for the Workforce functional area.

Process: Workforce Action Plan
in the Adaptive Planning for the Workforce functional area.

Reports: Headcount Plan (Adaptive Planning)
in the Adaptive Planning for Financial Plans functional area and Adaptive Planning for the Workforce functional area.

Reports: Workforce Action Plan
in the Adaptive Planning for the Workforce functional area.

Reports: Currency Rates
in the Common Financial management functional area.

Reports: Financial Accounting
in the Common Financial management functional area.

Set Up: Adaptive Planning
in the System functional area.

Set Up: Headcount Planning
domain in the Adaptive Planning for the Workforce functional area.

Compensation Details: Headcount Planning
domain in the Adaptive Planning for the Workforce functional area.

Set Up: Financial Planning
in the Adaptive Planning for Financial Plans functional area.

Set Up: Fiscal Schedule
in the Adaptive Planning for Financial Plans functional area.

Set Up: System
in the System functional area.

Set Up: Tenant Setup - General
in the System functional area.

Set Up: Tenant Setup - Adaptive Planning
in the System functional area.

Set Up: Tenant Setup - BP and Notifications
in the System functional area.

Set Up: Tenant Setup - Worklets
in the System functional area.

Set Up: Plan Publishing
in the Adaptive Planning for Financial Plans functional area or Adaptive Planning for the Workforce functional area.

Provide both View and Modify access to the Set Up: Tenant Setup - Adaptive Planning
domain.

Before registering API clients and creating Workday Credentials in Adaptive Planning, we recommend that you:

Search for the task

Edit Tenant Setup - Security

Select

OAuth 2.0 Client Enabled

OAuth 2.0 Settings

For access to Adaptive Planning, we recommend that you:

Create a user-based security group for Adaptive Planning users.

Add this security group to the Access Adaptive Planning
domain.

Give this security group View and Modify access.

Workday automatically adds these users to the Worklet: Adaptive Planning
domain once you sync those users.

To enable planners to publish, we recommend that you:

Create a user-based security group for Adaptive Plan publishers.

Add this security group to the Set Up: Plan Publishing
domain.

Give this security group View and Modify access for reports and tasks.

Give this security group Securable Integrations Get and Put access.

To publish plans and access the plans in Financials or HCM:

Add the segment-based security groups you just created to the Access Plan Type (Segmented)
domain.

Give these security groups View and Modify access.

Security: Security Configuration
domain in the System functional area.

Edit Business Process Security Policies.

To publish plans, set up your business process and security policy based on your organization needs, such as to add approvers. We support these business processes:

Plan Event
for financial plans.

Headcount Planning
to use plan and execute tasks for headcount planning.

Headcount Plan Event
for publishing headcount plans.

Workforce Planning Action Event
, Create Position
, and Job Requisition
for workforce plans.

To enable plan publishers to publish, add their security group on these initiating actions:

Import Budget
(WS Background Process), for financial plans.

Import Headcount Plan
(WS Background Process), for headcount plans.

Import Workforce Planning Actions
(WS Background Process), for workforce plans.

Workday automatically uses these web services when you publish. We recommend that you don't use these web services to import planning data manually.

To enable workforce planners and any downstream workers to submit the positions for creation, add their security groups to either of these business process initiating actions:

Create Position
initiating action on the Create Position
business process.

Create Job Requisition
initiating action on the Job Requisition
business process.

To route Job Requisition
business events initiated by your publishes, access the

Edit Tenant Setup - HCM

task and add security groups on the

Route Create Job Requisition Events

prompt.

These security groups must be:

Either user-based security groups or have a role usage of Supervisory.

Added on the Create Job Requisition
initiating action on the Job Requisition
business process.

Security: Set Up: Tenant Setup - HCM
domain in the System functional area.

Activate Pending Security Policy Changes.