Skip to main content
Documentation
Documentation
Administrator Guide
Last Updated: 2024-11-01
Steps: Set Up Segmented Security for Leave Types

Steps: Set Up Segmented Security for Leave Types

Create leave types.
Restrict members of segment-based security groups to designated leave types so that they can only select specific leave types when:
  • Requesting or entering leave of absence.
  • Correcting leave events.
  • Requesting or entering return from leave of absence.
You can ensure that members of a security group can select all leave types, including types restricted to segment-based security groups. Secure the group directly to the
Access Leave Type (Segmented)
 domain.
  1. Access the
    Domain Security Policies for Functional Area
     report .
    Review the segment-based security groups on the
    Access Leave Type (Segmented)
     domain security policy. This domain enables you to configure access to security segments for leave types.
    If not already enabled, select
    Domain Security Policy
    Enable
     from the related actions menu of the security policy for the
    Access Leave Type (Segmented)
     domain in the Time Off and Leave functional area.
    Security: The
    Security Activation
     and
    Security Configuration
     domains in the System functional area.
  2. Access the
    Create Leave Type Security Segment
     task.
    Create a leave type security segment that defines the group of restricted leave types.
    In the
    Leave Types
     prompt, select the leave types that comprise the segment.
    Security:
    Set Up: Leave of Absence
     domain in Time Off and Leave functional area.
  3. Create a segment-based security group and associate it to the leave type segment.
    1. In the
      Security Groups
       prompt, select the groups that have access to the leave types.
    2. In the
      Access to Segments
       prompt, select the leave type security segments to which members of the specified groups have access.
  4. Edit Domain Security Policies.
    1. Add the segment-based security groups to the
      Access Leave Type (Segmented)
       domain in the Time Off and Leave functional area.
    2. If necessary, remove the security groups from the domain security policy that are also in the segment-based security group.
      If you don't remove the security groups:
      • The domain-level permissions override the segment-based permissions.
      • Members of security groups secured directly to the domain can access all leave types.
      If the
      Access Leave Type (Segmented)
       domain security policy includes security groups that aren't associated with a leave type segment, Workday doesn't apply any security segment restrictions to users in the security group, even if they're also in a security group that's associated with another leave type segment. Example: Your company has 4 leave types:
      Adoption
      ,
      Parental
      ,
      Maternity
      , and
      Sabbatical
      . You configure these segment-based security groups and add them to the domain.
      Segment-Based Security Group
      Access Leave Type (Segmented) Domain Access
      Associated with a Segment
      Leave Type
      Considerations
      Group A  - Administrators
      Yes
      No
      N/A
      Users can access all leave types when correcting leave events, requesting leave of absence, or requesting return from leave of absence. This overrides the
      Group B - Employee as Self
       security configuration.
      Group B - Employee as Self
      Yes
      Yes
      Adoption
      ,
      Parental
      , and
      Maternity
      . 
      Users can access only the
      Adoption
      ,
      Parental
      , and
      Maternity
       leave types. They can't access the
      Sabbatical
       leave type.
When members of the segment-based security groups enter or request leaves of absence, they can only select the leave types that comprise the leave type security segment. The members can also correct only requests with the leave types to which they have security access.
The
All Leave Type Security Segments
 report enables you to see the leave types to which segment-based security groups have access.