Skip to main content
Documentation
Documentation
Administrator Guide
Last Updated: 2023-06-23
Steps: Maintain Access to Investors

Steps: Maintain Access to Investors

  • Understand segment-based security groups and segmented security.
  • Determine whether you need to restrict segments of data to groups of workers.
Control access to individual investors through security segments so that workers can access only the investors that they can see.
Segmented security requires a lot of planning. With:
  • Security segments, included values can cross multiple segments or be mutually exclusive.
  • Security groups, workers can be part of one or more groups and have access to one or more security segments.
  1. Edit Domain Security Policies.
    Enable members of selected security groups to define security segments.
    Configure the
    Set Up: Investor Security Segments
     domain in the
    System
    Functional Area
    .
  2. Access the
    Create Investor Security Segment
     task.
    Create enough security segments to cover each unique security access requirement. Example: Create different segments for executives, managers, and employees. Workday recommends that you build from least to most restrictive.
    If you don't select a
    Company
    , workers from any company can access the listed investors.
    Security:
    Set Up: Investor Security
     domain in the System functional area.
  3. Create a
    Segment-Based Security Group
     and associate it with an
    Investor Security Segment
     to meet your business requirements.
  4. Edit Domain Security Policies.
    Edit permissions on the applicable domain security policy to enable members of the new segment-based security groups to access investor information.
    Configure the
    Access Investor (Segmented)
     security policy in the
    Financial Accounting
    Functional Area
    , adding the segment-based security groups with the appropriate access.
  5. Activate Pending Security Policy Changes.
  6. Test the security policy changes.
    Sign in as a different user for each segment and verify that they have access to only the investors associated with their segment-based security groups.
Workers can select from only the investors that they have security access to.
  • Enable members of your senior management team to access only certain investors, and members of your executive branch to access all investors in your company.