Skip to main content
Documentation
Documentation
Administrator Guide
Last Updated: 2026-06-12
Steps: Set Up Security for Hold Reasons

Steps: Set Up Security for Hold Reasons

Hold reasons provide a justification for a hold you apply to students. You can configure security groups and segments for hold reasons to specify:
  • Access for each hold reason.
  • Whether access includes the ability to apply, override, update, or remove student holds that correspond with those hold reasons.
Example: As the Student Systems Administrator of Alma Mater University, you want to restrict the roles that can apply, override, and remove holds for:
  • Advising appointments and preregistration activities to advisors and registrars.
  • Past-due balances to the bursar.
You want to make sure that registrars and advisors can apply, override, and remove holds related to advising appointments and preregistration activities. However, they shouldn’t be able to apply, override, or remove a hold for a past-due balance. Only the bursar or authorized users from Student Financials should be able to apply, override, or remove a past-due balance hold.
You can accomplish this requirement by creating 2 hold reason security segments and the corresponding security groups.
  1. Edit Domain Security Policies.
    To give access to create, edit, view, and delete Student Hold Reason security segments, select the:
    1. Action Items and Holds
       functional area.
    2. Set Up: Hold Reason Segments
       domain.
    3. Security groups or users for managing hold reason security segments.
    Security:
    Set Up: Hold Reason Segments
     domain in the Action Items and Holds functional area.
  2. Activate Pending Security Policy Changes.
  3. Access the
    Create Student Hold Reason Security Segment
     task.
    You can include Workday-defined reasons and tenant-defined reasons in the same segment.
    Security:
    Set Up: Hold Reason Segments
     domain in the Action Items and Holds functional area.
  4. Access the
    Create Security Group
     task.
    Select:
    1. Segment-Based Security Group
       from the
      Type of Tenanted Security Group
       prompt.
    2. The group to give access to the student hold segment you created from the
      Security Groups
       prompt.
    3. The student hold security segment that you created from the
      Access to Segments
       prompt.
    Security:
    Security Configuration
     domain in the System functional area.
  5. Edit Domain Security Policies.
    Grant the relevant security groups, including the segmented security groups you create, access to these domains:
    Domains
    Purpose
    Access Hold Reasons
    Enables access to select the specific hold reasons in the
    Apply Student Hold
     task.
    Manage: Apply Holds
    Grants access to the
    Update Hold
     task (only for the reasons they have access to).
  6. Grant the relevant security groups, including the segmented security groups you create, access to these business processes:
    Business Processes
    Purpose
    Override Student Hold Assignment
    Enables access to override holds (only for the reasons they have access to).
    Remove Student Hold Event
    Enables access to remove holds (only for the reasons they have access to).
  7. Activate Pending Security Policy Changes.
Access the
View Student Hold Reason Security Segment
 report to view hold reasons the segmented security groups can access.