Skip to main content
Documentation
Documentation
Administrator Guide
Last Updated: 2026-09-18
Steps: Set Up Security for Flex Teams

Steps: Set Up Security for Flex Teams

You can set up security to determine who can:
Workday provides the ability to enable contingent workers to use Flex Teams as a configuration option for use at your discretion. You must always verify any configurations in your tenant and should consult with your own legal counsel to determine if the configurations meet your business and compliance needs.
  1. Access the
    Domain Security Policies for Functional Area
     report.
    Select
    Domain Security Policy
    Enable
     from the related actions menu of these domain security policies in the Talent Marketplace functional area:
    • Flex Teams
    • Flex Team Worker Data
    • Manage: Flex Teams
    • Manage: Flex Teams Host Access
    • Reports: Flex Teams
    • Self-Service: Flex Teams
    • Set Up: Flex Teams
    • Worker Data: Flex Teams
    Security:
    Security Activation
     and
    Security Configuration
     domains in the System functional area.
  2. Create a user-based security group named
    Flex Team Administrator
     and assign users.
    Workers in the
    Flex Team Administrator
     security group that are also a member of a flex team do not retain their administrator privileges for that specific flex team.
  3. As you complete the task, consider:
    Option
    Description
    Role Name
    Enter a name for the flex team host role or any other assignable role that you want to create.
    Workday Role
    Select
    Gig Host
     for the flex team host role.
    For other assignable roles, you can optionally leave this field blank when you don't want to map to a Workday role.
    Enabled For
    Select
    Gig
    .
    Self-Assign
    Select the
    Self-Assign
     check box for the flex team host role.
    For other assignable roles, you can optionally leave this check box unchecked.
  4. Create constrained and unconstrained role-based security groups for the flex team host role and any other assignable roles that you created.
    As you create a constrained role-based security group, consider:
    Option
    Description
    Access Rights to Organizations
    Workday recommends that you select
    Applies To Current Organization and Unassigned Subordinates
    .
    Access Rights to Multiple Job Workers
    Workday recommends that you select
    Role has access to the positions they support
    .
  5. Configure these domains in the Talent Marketplace functional area:
    Domain
    Example Security Groups
    Permission
    Considerations
    Flex Teams
    All Contingent Workers
    All Employees
    Modify
    Adding contingent workers to this domain enables them to access and express interest in flex teams.
    Flex Team Worker Data
    Flex Team Administrator
    Flex Team Host (Unconstrained)
    View
    The Flex Team Host (Unconstrained) security group is required for the flex team host to provide skill endorsements to flex team members.
    Manage: Flex Teams
    Flex Team Administrator
    Manager
    Modify
    Also add the role-based security groups that you created for your assignable roles when you want them to view or edit flex teams and flex team membership.
    Manage: Flex Teams Host Access
    Flex Team Administrator
    Manager (Unconstrained)
    Modify
    (Optional)
    Opportunity Marketplace in Career Hub
    All Contingent Workers
    All Employees
    Modify
    Add workers to enable them to access the
    Career Hub
     and view suggested work opportunities there, including flex teams.
    Reports: Flex Teams
    Flex Team Administrator
    HR Administrator
    View
    To enable administrators to view flex team report data, grant View permission on these domains:
    • For the
      Internal Job Application Rate by Flex Team Membership
       report:
      Candidate Data: Job Applications
       in the Recruiting functional area.
    • For the
      Internal Movement Rate by Flex Team Membership
       report:
      Worker Data: Historical Staffing Information
       in the Staffing functional area.
    Self-Service: Flex Teams
    Contingent Worker As Self
    Employee As Self
    Modify
    Adding contingent workers to this domain enables them to view flex teams that they have expressed interest in or participated in.
    Set Up: Flex Teams
    Flex Team Administrator
    Modify
    (Optional)
    Set Up: Career Hub and Opportunity Marketplace
    HR Administrator
    Talent Administrator
    Modify
    Enables administrators to set up flex team suggestions on Opportunity Marketplace in
    Career Hub
    .
    Worker Data: Flex Teams
    Flex Team Administrator
    Flex Team Host
    View
    When you enable new workers to access flex teams, Workday doesn't suggest them as flex team candidates for up to 24 hours, until the match analysis data process updates, on business days only.
  6. Configure the security policies for these business processes:
    Business Process
    Description
    Add Flex Team Member
    • Add the role-based security groups that you created for your assignable roles to the initiating action when you want to enable them to invite others to join a flex team.
    • Add security groups to the
      View All
      ,
      Approve
      , and
      Deny
       actions to enable them to approve or deny invitations to join flex teams. Workers must have this access to join a flex team.
    Manage Flex Team
    Add the role-based security groups that you created for your assignable roles to actions on the business process security policy.