Configure Security Policies for Agent Skills

Administrator Guide

Unique Ambient Agent Security Group is generated for ambient agents.

Security: Security Configuration
domain in the System functional area.

Workday evaluates security for:

Delegate agents, by using the security access of the invoking user.

Ambient agents, based on the agent's permissions. When you activate a skill, Agent System of Record (ASOR) generates a unique Ambient Agent Security Group (ASG). You must assign this ASG to the relevant domain or business process security policies to grant access to secured items, such as tools and APIs.

Access the

View Security for Agent Skill

report.

From the related actions menu of each

Security Policy

, select

Domain Security Policy

Edit Permissions

Complete the task:

Option	Description
Delegate Agent	From the Security Groups prompt, select the security groups that include the invoking users who require access.
Ambient Agent	From the Security Groups prompt, select the Ambient Agent Security Group.

Select the

View

Modify

check boxes to grant the security group access to securable items.

If a tool in the

View Security for Agent Skill

report requires Get/Put access, select the

Get

Put

check boxes to grant security groups access to integrations.

Activate Pending Security Policy Changes