Concept: Business Process Segmented Security

You can use the

Create Business Process Type Security Segment

task to configure segment-based security segments for business process definitions. Business process administrators can access all business processes in the tenant. The task enables you to control which business processes a business process administrator can access.

Example: Adam and Mike are business process administrators. You want Adam to have access to only staffing-related business processes and Mike to have access to only finance-related business processes. You use the task to grant access by segment-based security. Adam can now access staffing-related business processes but not finance-related business processes. Mike can access finance-related business processes but not staffing-related business processes. Use functional areas and specific business process types for this purpose.

You need to select at least 1 value in either the

Business Process Type

prompt or the

Functional Area

prompt. Based on your selection in 1 or both prompts, Workday grants access to business processes. When you configure both prompts, they aren't dependent upon each other.

You can use the

Create Business Process Type Security Segment

task to create security segments. You also need to add the segments to a segment-based security group. You can use Object Transporter to shift segments from tenant to tenant.

Access to these business process components can't be segmented:

Rules
To Dos
Checklists
Calculated dates

To use a business process type security segment, you must first:

Associate it with a segment base.
Secure the group to the
Manage: Business Process Definitions
domain.

The

Manage: Business Process Definitions

domain only includes tasks related to defining business processes. Workday manages access to in-process events using the security policy of individual business processes.

Segment-based security groups can include any type of security group, including role-based security groups. When you use a role-based security group, only maintain business processes affiliated with the organizations they have an assigned role for.

Workday recommends that you grant unconstrained access to business process administrators on the Business Process Definitions report data source (RDS) so they can build custom reports using this RDS.