Skip to main content
Documentation
Documentation
Administrator Guide
Last Updated: 2023-06-23
Steps: Set Up Security for Drive

Steps: Set Up Security for Drive

  • Security:
    Security Configuration
     domain in the System functional area.
Drive enables you to manage access to, and security for, many file types, such as Microsoft® file types, PDFs, images, and media files. Additionally, you can create, share, and manage Workday files such as Worksheets workbooks, Slides presentations, notification templates, and discovery boards.
If you are using Drive with integrating applications such as Worksheets, Notification Designer, or Discovery Boards, remember to configure security for the integrating app in addition to configuring Drive permissions.
Keep in mind that Drive doesn't support:
  • Using delegation to give access to Drive items.
  • Access restrictions in authentication policies.
  • Using constrained security groups to manage who you can share its primary file types with; these file types include workbooks, videos, images, PDFs, and others.
  • Segmented security, which is a way to grant a group of users access to specific items. Instead, we support sharing items with unconstrained security groups.
  1. Create security groups for your Drive administrators and users.
    Use these security group types:
    • Public groups
    • Role-based (constrained) groups
    • Unconstrained groups
    Keep in mind that Drive supports applications, such as Worksheets for embedded integrations, which require that you add constrained security groups to the Drive domain, and to related domains. However, Drive doesn't support using constrained security groups to manage sharing of its primary file types; these file types include workbooks, videos, images, PDFs, and others.
  2. Create or edit a security policy for these domains and add permissions:
    • Drive
    • Drive Administrator
    • Reports: Drive Admin
    • Reports: Drive User
    • View Drive File and Media
       (optional)
    • Drive Web Services
       (optional)
    1. Access the
      View Domain
       report.
    2. Select the domain from the
      Domain
       prompt.
    3. From the related actions menu, select
      Domain
      Create Security Policy
      , or select
      Edit Security Policy Permissions
       if there's an existing policy.
    4. As applicable, in
      Report/Task Permissions
      , add or edit security groups.
    5. Select the
      View
       and
      Modify
       check boxes.
      In the domain setup, you must select both
      View
       and
      Modify
      . You can't use these settings to manage file access permissions in Drive. You select view and edit permissions for individual files when you share them.
    6. As a related action on the domain security policy, select
      Domain Security Policy
      Enable
      .
  3. (Optional) Enable Workday Media to upload and manage video files in Drive. See Setup Considerations: Workday Media Cloud.
  4. Activate Pending Security Policy Changes.