Skip to main content
Administrator Guide
Last Updated: 2025-01-24
Set Up Security for Registration Restrictions

Set Up Security for Registration Restrictions

Security:
Security Configuration
domain in the System functional area.
You can set up security that enables administrators, faculty members, and other users at your institution to override registration restrictions. When you override the registration restrictions that prevent students from registering for course sections, you can address course registration exceptions. Example: These faculty members from the College of Arts & Sciences can override registration restrictions when they register students for courses:
  • Academic advisors can bypass the repeat attempt limit and corequisite courses required for a course.
  • The faculty dean can register students who don't meet the eligibility requirements of a course.
  • Instructors can bypass the capacity limits on a course section.
When you configure domains with course registration tasks to include role-based security groups, those users can override all registration restrictions when they use those tasks. You can configure additional security groups to prevent certain users of those role-based security groups from overriding any registration restrictions. Example: You enable all instructors to bypass capacity limits on course sections, but create a separate security group to remove override access for instructors of courses that can't accommodate additional students.
  1. Access the
    Create Security Group
    task.
  2. From the
    Type of Tenanted Security Group
    prompt, select:
    Option
    Description
    Segment-Based Security Group
    Select to enable users to override specific registration restrictions only.
    Role-Based Security Group (Constrained)
    Role-Based Security Group (Unconstrained)
    Select to enable users to override all registration restrictions.
  3. Click
    OK
    .
  4. Complete the task.
    To enable users to override specific registration restrictions only, complete these options:
    Option
    Description
    Security Groups
    Select security groups to grant override access to.
    If you select a role-based security group, we recommend you remove it from domains where you plan to add your new segment-based security group. Role-based security groups can override all registration restrictions when configured on a domain.
    Access to Segments
    Select
    Student Registration Restriction Security Segment
    and the segments to which you want to grant override access.
    For users who register students for courses using web services, we recommend you select fewer registration restrictions. When they register students using web services, they won't be able to specify the registration restrictions to override. Instead, all registration restrictions that they're enabled to override are bypassed, which can result in incorrect registrations.
    To create a security group that prevents users from overriding any registration restrictions, select
    No Student Registration Restrictions
    . This only applies when you:
    • Selected a role-based security group from the
      Security Group
      prompt
    • Already configured that same security group on a domain with registration tasks.
  5. Click
    OK
    .
Add your security group to domains with registration tasks. When users use registration tasks from domains configured with your new security group, they can override the registration restrictions defined by the security group. Example: Add your security group to the
Manage: Mass Student Registration Restriction Overrides domain
so that faculty members can only bypass restrictions on the
Mass Register Students
task, and no other task.
To provide users with a consistent experience, Workday recommends that you add your security group to multiple domains to ensure they can grant overrides on similar registration tasks. Example: You create the Restriction Overrides for Academic Advisors security group and configure the
Manage: Registration Actions
domain to include them. Academic advisors can now override registration restrictions on these tasks:
  • Register Student for Course
  • Register Student from Waitlist
For a consistent experience, you also configure the
Manage: Access to Registrations
domain to include the Restriction Overrides for Academic Advisors security group. Academic advisors can now also override registration restrictions on these tasks, which are similar to the tasks in the
Manage: Registration Actions
security domain:
  • Register Student from Section Waitlist
  • Waitlist Student for Course