Skip to main content
Documentation
Documentation
Administrator Guide
Last Updated: 2025-04-11
Example: Create Security Segments on Journey Categories

Example: Create Security Segments on Journey Categories

You can create security segments and assign security permissions to journey categories for an individual or a group.
This example illustrates how you can use security segments to control journeys categories to suit the needs of your organization. We'll create segments to:
  • Restrict users from accessing a specific journey category.
  • Grant access to certain individuals or groups to configure, distribute, or report on Journeys.
These domains in the Journeys functional area:
Domain
Permissions
Actions
Manage: Journey Builders
  • Segment- Journey Category
  • Unconstrained Groups
Users with
Modify Permissions
:
  • Create a journey
  • Modify a journey
  • View a journey
Users with
View Permissions:
  • View
  • Preview
  • Run reports and access journey metrics.
If a user has
Modify Permissions
 for this domain and has been granted permissions for
Who Can Start the Business Process
, they can configure journey distribution to distribute journeys.
When you add segment-based security groups to this domain, users can only configure categories they have access to, for distributing journeys.
Set Up: Journey Administration
Unconstrained Groups
Users can create and modify a journey category.
  1. To configure segment-based security, enter your Workday tenant.
  2. Access the
    Domain Security Policies for Functional Area
     and enter
    Journeys
     in the
    Functional Area
     tab.
    The security domains for the Journeys functional area are listed on the left-hand side.
  3. (Optional) Remove users from the
    Set Up: Journey Administration
      if you want to restrict their access to create, edit, and view journey category functionalities.
  4. As you complete the task, consider:
    Field
    Description
    Type of Tenanted Security Group
    Select
    Segment-Based Security Group
    .
    Name
    Enter a name of the group that you want to segment out.
    Onboarding Journeys
    Security Groups
    Select the security group that you want to have access to the journey categories you're segmenting out.
    Onboarding Administrator
  5. To configure distribute permissions, navigate to the
    Edit Business Process Security Policy
     task, and click
    Journey Distribution
     from the
    Business Process Type
     prompt.
    You can create a
    Distribute Journeys
     security group that enables HR partners to distribute journeys but doesn't grant permissions to the Onboarding Administrator group to distribute journeys.
    You must have permission to start the 
    Business Process > Journey Distribution Business Process
    .
  6. Activate Pending Security Policy Changes after completing the configuration process.
The security groups enable the HR partner and Onboarding Administrator to access information based on their segment-based permissions.
  • Logan, HR partner, has unconstrained access. When they navigate to the
    Journeys Workspace
    , they're able to:
    • See all the individuals with configured journeys in the tenant.
    • View, edit, and distribute any journey category.
    • Create new journey categories.
      You must have access to the
      Set Up: Journey Administration
       domain in the journey functional area.
  • Daniel, HR partner, is responsible for all the relocations in their organization and therefore has access only to
    Modify
     and
    Distribute
     access to specific journey categories such as relocation journeys. When they navigate to the
    Journeys Workspace
    , they:
    • Can view and edit the
      Open Enrollment Journeys
       and 
      Onboarding Journeys
      .
    • Can't view or edit the
      Transition to Managers Journeys
      .
    • Can create a report on specific categories limited to enrollment and onboarding.
  • James Walker, Onboarding Administrator, can view, preview, look at metrics, edit, and distribute these categories in these tenants.
    • Onboarding - Product Management
    • Onboarding - Sales
    • Onboarding - Software Engineering