Skip to main content
Documentation
Documentation
Administrator Guide
Last Updated: 2025-04-04
Steps: Set Up Security for Credit Card Accounts, Files, and Transactions

Steps: Set Up Security for Credit Card Accounts, Files, and Transactions

Security:
  • Process: Credit Card
  • Process: Credit Card Files
  • Set Up: Credit Card
You can configure enhanced security for credit card-related domains ensuring only authorized users can access data related to:
  • Corporate credit card billing accounts.
  • Credit cards.
  • Credit card transactions.
  • Files.
You can access a credit card billing account or credit cards through either:
  • Unconstrained security.
  • A role in a company associated with the credit card billing account.
You can access credit card transactions through either:
  • Unconstrained security.
  • A role in a company associated with the credit card billing account.
  • A role in a company associated with the expense report containing the transaction.
  • A role in a company associated with the expense payee who owns the transaction.
  • A role in an organization associated with central travel card transactions.
If your tenant was created before 2025R1, Workday automatically copies over all security groups from the
Process: Credit Card
 domain to the
Process: Credit Card Files
 domain. Members of these security groups retain unconstrained access until you remove them from the security policy.
  1. Remove invalid security groups.
    1. Access the
      Security Exception Audit
       report.
    2. Select the
      Domain Security Policy
       that has invalid security groups.
    3. Click
      Edit Permissions
      .
  2. Activate Pending Security Policy Changes.
You can now make further changes to your security policy.
Organization-based roles can no longer see cards or transactions related to the
Process: Credit Card
 or
Setup: Credit Card
 domains. They will no longer be able to access the tasks or cards. They can continue to access central travel cards or transactions for organizations that they have a role in and if they are part of the
Organization: Maintain Central Travel Card Transaction
 domain.
We recommend that you evaluate your security groups on the impacted domains and ensure user groups are provided the appropriate security access.