Set Up Security for Resource Pool Audience Builder
The user building the audience needs access to the data source, data source filters, and report fields to access them within
Audience Builder
.Add an appropriate security group for your user, such as
Resource Pool Administrator
, to the various domains.- Access theCreate Security Grouptask.
- SelectSegment-Based Security Groupin theType of Tenanted Security Groupprompt and specify a name to create your security group.Example:Resource Pool Administratorand orResource Pool Managersecurity group.
- Under theGroup Criteriasection, in theSecurity Groupsprompts, select the configured security groups.
- Under theAccess Rightssection, in theAccess to Segmentsprompt, selectResource Pool Audience Builder.
- Edit Domain Security Policies.
- Set up theAdminister Audiencedomain in the System functional area. Add the new segment based security group you created to the domain.
- In theReport/Task Permissionsgrid, select theViewandModifycheck boxes for the security groups you configured.Example: SelectResource Pool AdministratororResource Pool Managersecurity group.
- Access theActivate Pending Security Policy Changestask and enable the changes.
- Grant security access to:
- Add a PersonandRemove a Persontasks under theIndividual Exceptionssection of theAudience Criteriain theCreate Audiencetask so that the user can add or remove individual workers from an audience pool.Add the security group for your user, such as Resource Pool Administrator, to theWorker Data: Worker IDdomain.
- Viewaccess to these domains in the System functional area to be able to access the related action of a report field used in the audience:
- Custom Report Creation
- Custom Field Management
- Security domains for data sources:
- Add the security group for your user, such as Resource Pool Administrator, to the domains for these data sources that you can select to build the audience:
- Indexed All Workers(filters out terminated workers)
- Workers for HCM Reporting(includes terminated workers)
- Access theData Sourcesreport, click the relevant data source and navigate to theSecuritysection to view the applicable security domains.
- Example:Indexed All Workersdata source.
- Associated security domains:
- Audits: Workday Support
- Indexed Data Source: Workers
- Manage: Facilitated Enrollments
- Manage: Learning Course Enrollments
- Manage: Resource Pool
- Manage: Unrestricted Mass Enrollments
- Reports: Headcount Planning
- Reports: Time Tracking
- Worker Data: Time Off (Time Off)
- Security domains for data source filters:
- Add the security group for your user, such asResource Pool Administrator, to the domains for the data source filters you select to build the audience.
- Access theData Sourcesreport and filter for the relevant data source.
- From the related actions menu of the data source filter, view the relevant security domains. Example:Active Workers by Resource Pooldata source filter.
- Associated security domain:Manage: Resource Pool.
- Security domains for report fields:
- For non-public report fields, grant a user's security group the necessary permissions to the security domain that protects the field.
- Access the relevant report field and navigate to the security section to identify the required security domains. To identify the applicable security groups, accessView Security Groupsfrom the related actions menu.
- To grant access, navigate to the identified security domain, and from the related actions menu selectDomain>Edit Security Policy Permissions.
- In theReport/Task Permissionssection, add theResource Pool Audience Buildersecurity group.
- ClickOKand run theActivate Pending Security Policy Changestask to activate the changes.
- Confirm the activation. Once complete, the user can see the report fields and its data.
- Example:Certificationsreport field. Associated security domains:Person Data: CertificationsandSelf-Service: Certifications.
- Some common non-public report fields to include:
- Certifications
- Job Profile
- Job Level
- Language Skills
- Management Level
- Project Roles
- Skills
- Worker Type.
When you use a Calculated field in theAudience Builder, make sure that the users also have access to all fields used in the calculated field.