Steps: Maintain Access to Ad Hoc Payment Spend Categories

Understand segment-based security groups and segmented security.

Determine how you want to restrict segments of ad hoc payment spend categories to groups of workers.

Configure segmented security to restrict access to ad hoc payment spend categories and spend category hierarchies to members of designated security groups. Workers can only select the spend categories allowed for their security level when they create or edit ad hoc payments.

Edit Domain Security Policies.

Enable members of selected security groups to define security segments.

Once you access the

Domain Security Policies for Functional Area

report, select:

The System
functional area.

The

Segmented Setup

folder from the hierarchy.

Access the

Create Ad Hoc Payment Spend Category Security Segment

task.

Define security segments with the spend categories and spend category hierarchies for specific workers. Create enough segments to cover each unique security access requirement. Example: Create different segments for executives, managers, and employees. Workday recommends that you build from least to most restrictive.

Create Segment-Based Security Groups.

Security groups tie workers to the values in security segments. Each segment-based security group defines a combination of security groups and the security segments to which their members have access. When you create a security group, select Segment-Based Security Group
on the

Type of Tenanted Security Group

prompt.

Edit Domain Security Policies.

Edit permissions on the applicable domain security policy. This policy enables members of new segment-based security groups to access values included in their segments within relevant tasks and reports.

Once you access the

Domain Security Policies for Functional Area

report, select:

The Banking and Settlement
functional area.

The Access Ad Hoc Payment Spend Category (Segmented)
security policy from the hierarchy.

Activate Pending Security Policy Changes.

Test the security policy changes.

Sign in as a user for each segment and verify that you can only access the spend categories associated with that segment-based security group.

The security segment for ad hoc payment spend categories enables workers to:

View ad hoc payments when they have segment security access to 1 or more ad hoc payment lines.

Edit, cancel, copy, or submit an ad hoc payment when they have segment security access to all lines.

Concept: Security Groups