Steps: Maintain Access to Bank Accounts for Ad Hoc Payments
Understand segment-based security groups and segmented security.
Configure segmented security to restrict the bank accounts that workers can use to create,
edit, and cancel ad hoc payments. You can control which security groups of workers
can access particular bank accounts for managing ad hoc payments.
- Edit Domain Security Policies.Enable members of selected security groups to define security segments.Once you access theDomain Security Policies for Functional Areareport, select:
- TheSystemfunctional area.
- TheSegmented Setupfolder from the hierarchy.
- Access theCreate Bank Account Security Segmenttask.Define security segments with the bank accounts for specific workers. Create enough segments to cover each unique security access requirement. Example: Create different segments for executives, managers, and employees. Workday recommends that you build from least to most restrictive.Security:
- Access Ad Hoc Payment Bank Account (Segmented)domain in the Banking and Settlement functional area.
- Cash Management Segment Setupdomain in the System functional area.
- Security groups tie workers to the values in security segments. Each segment-based security group defines a combination of security groups and the security segments to which their members have access. When you create a security group, selectSegment-Based Security Groupon theType of Tenanted Security Groupprompt.
- Edit Domain Security Policies.Edit permissions on the applicable domain security policy. This policy enables members of new segment-based security groups to access the values in their segments for relevant tasks and reports.Once you access theDomain Security Policies for Functional Areareport, select:
- TheBanking and SettlementFunctional Area.
- TheAccess Ad Hoc Payment Bank Account (Segmented)security policy from the hierarchy.
- Activate Pending Security Policy Changes.
- Edit a bank account to associate it with a bank account security segment.
- Test the security policy changes.Sign in as a user for each segment and verify that you can only access the bank accounts associated with that segment-based security group.