Skip to main content
Administrator Guide
Last Updated: 2026-06-26
Reference: Security Domains for Learning

Reference: Security Domains for Learning

You can configure these domains in the Learning Core and Extended Enterprise for Learning functional areas. They provide access to tasks and reports for Learning and Extended Enterprise Learning.
Domain
Description
Learning Access
Provides access to learning self-service tasks and reports. Learners with access to this domain can:
  • Search for learning content.
  • View programs, courses, and lessons.
  • Set their learning preferences.
  • Complete learning surveys.
  • View their progress for learning content.
  • Express interest in courses.
  • Add content to learning paths.
Manage: Learning Native Content
Available only with Workday Learning, powered by Sana subscription.
Controls access to
Sana Create
and Sana content capabilities in
Learning Admin Hub
for Workday Learning, powered by Sana.
Workers with
View
and
Modify
access on this domain can use
Sana Create
and Sana content capabilities only when they also have provisioned integrated access. Complete Steps: Set Up User Provisioning for Workday Learning Powered by Sana.
You can assign constrained or unconstrained groups. Use unconstrained groups when workers must see all Sana content in
Learning Admin Hub
; use constrained groups so workers see only content they own or that was explicitly shared with them.
Maintain Archived External Learning User
Provides access to the
Unarchive External Learning User
task, which enables users to unarchive external learning users who aren't active workers.
Manage: Create and Edit Learning Roles
Provides access to administrative tasks and reports to manage learning assessors and instructors.
Manage: E-Commerce for Learning
Enables administrators to set up and configure the learning content payment processor.
Manage: Extended Enterprise
Provides extended enterprise learning administrators with the ability to manage affiliations, job profiles, and dashboard access.
Manage: Extended Enterprise Affiliation Learners
Provides affiliation managers access to extended enterprise learners in their affiliation.
Manage: Extended Enterprise Learner Type
Provides users with the ability to create and manage extended enterprise learner types. Users with View access on the
Manage: Extended Enterprise
domain can view the learner type you assign to an extended enterprise learner.
Manage: Facilitated Enrollments
Provides selected users with access to the
Find Workers to Enroll
report to manage enrollments for blended and digital courses.
We recommend that users with access to this domain don't have access to the
Manage: Learning Course Enrollments
domain. This ensures they can only enroll learners that they have access to.
You can add a validation on the
Mass Enroll
business process definition to prevent selected user groups from enrolling learners into required learning.
Manage: Learner Content Subscriptions
Provides access to learning content subscription functionality for extended enterprise learners who need to access learning content for a certain time period.
Manage: Learning Additional Data
Provides administrator access to create and manage custom objects for learning content.
Manage: Learning Assignment
Provides administrator access to manage campaign record assignments and learning assignment waive reasons.
Configure this domain to grant
View
and
Modify
permission to the Learning Administrator security group.
Manage: Learning Certifications
Provides access to administrative tasks and reports to manage Learning and Talent certifications.
Manage: Learning Content
Provides access to some administrative tasks and reports to manage learning content.
Manage: Learning Course Enrollments
Provides access to administrative based enrollment tasks. You can configure the domain security policy to provide access for users in an unconstrained user group. These users aren't Learning Administrators, but can mass enroll and mass drop learners from courses in the organizations they support.
You can also restrict access using learning security category or topic segments.
Manage: Learning Pricing
Provides access to most tasks for configuring pricing enablement, including:
  • Training credit mappings.
  • Learning organization payment configurations.
  • Prices and advanced pricing rules on courses and course offerings.
Manage: Learning Pricing Rules
Provides access to create condition rules for pricing enablement.
Manage: Learning Virtual Classroom Integration
Provides access to web services that manage the virtual classroom integration for your tenant.
Workday recommends that you create an Integration System User (ISU) and grant them
View
and
Modify
permission on the new domain. We recommend using these user names for virtual classroom integration with Microsoft Teams:
  • For the ISU:
    Learning_Integrations_User
    .
  • For the ISSG:
    Learning_Integrations_Group
    .
Manage: Mass Enrollments
Provides constrained access to these tasks:
  • Mass Drop by Role
  • Mass Enroll by Role
Self Service: On the Job Training
Provides access to tasks, reports, and data related to training activity lessons.
You can configure this domain to grant
View
and
Modify
permission to these security groups:
  • Self Service - External Learning Assessor
  • Self-Service - External Learning Instructor
  • Self Service - Internal Learning Instructor
  • Self-Service - Learning Assessor
Manage: Self-Registration
Provides extended enterprise learning administrators with the ability to manage and report on self-registration URLs.
Manage: Unrestricted Mass Enrollments
Provides unrestricted access to the
Find Workers to Enroll
report and these tasks:
  • Learning Mass Enroll
  • Mass Drop
Person Data: Certifications
Provides access to another person's certification information.
Person Data: Learning
Provides access to another person's learning transcript.
Reporting: Learning Pricing
Provides access to data sources for reporting on pricing configuration and enrollment pricing records.
Reports: Archived External Learning Users
Provides access to reports that display information on archived external learning users.
Reports: Extended Enterprise Affiliations
Provides access to reports on extended enterprise affiliations.
Reports: Extended Enterprise Affiliation Learners
Provides affiliation managers access to reports on learners in their affiliation.
Reports: Extended Enterprise Usage Metrics
Provides access to reports that enable you to track the number of active extended enterprise learners in your tenant. You can use this information to measure your product usage over time.
Reports: Learning Campaign Records
Provides access to the
Learning Campaign Record
report data source, enabling you to report on learning campaigns.
Reports: Learning Record
Provides access to reports that display learning record data, including:
  • Assignments.
  • Enrollments.
  • Equivalencies.
  • Historical tracking.
  • Media tracking.
Self-Service: Certifications
Provides users with access to their certification information.
Self-Service: Extended Enterprise Learning
Provides extended enterprise learners with the ability to view their own information.
Self Service: Learning
Provides access to the learner to view their course calendar and learning transcript.
Self-Service: Learning Assessor
Enables external learning assessors to view their profiles.
Self-Service: Learning Instructor
Provides access to roster management tasks and reports such as:
  • Instructor schedules.
  • Grading and attendance for course offerings.
  • Waitlists.
You can grant unrestricted access or restrict access so instructors can view enrollment and grading information only on courses for which they are the primary or secondary instructor. Grant permissions to the:
  • All Internal Learning Instructors and All External Learning Instructors security groups for unrestricted access.
  • Internal Learning Instructor as Self and External Learning Instructor as Self security groups for restricted access.
Set Up: Learning Catalog
Provides access to a large number of tasks and reports that enable administrators to manage learning content.
Set Up: Learning External Content Integrations
Provides access to the
Configure External Content
task and the external content integrations for Learning.
Set Up: Sale Item
Provides access to tasks and reports that enable you to manage sales items for learning program and course costs.
View External Learning User
Provides access to view external learning users.
View: Sale Item
Provides access to view a specific sales item.
You can configure these domains in the System functional area.
Domain
Description
Calendar Download Access
Provides access to download iCalendar (.ics) files.
Drive
Provides access to the Drive user interface to create and manage Workday files associated with media files.
Set Up: Learning Security Segments
Provides access to administrators to manage security segments for learning content.
Questionnaire Creation and Distribution
Provides access to questionnaires in learning survey lessons.
Questionnaire Results
Provides access to tasks and reports related to results in learning survey lessons.
Self-Service: Take Surveys
Enables learners to participate in learning survey lessons.
You can configure these domains in the Backpack Hub Service functional area.
Domain
Description
Manage: Media Advanced
Provides access to manage media and set passing scores on video interactions.
Manage: Media Settings
Provides access to manage settings for media content.
Media Reporting
Provides access to media tracking data for reporting.