Concept: Discovery Board Security

Workday enforces security when someone views or edits a discovery board. To view a discovery board, you must have permission on at least 1 data source used in it.

Each viz in a discovery board uses a single data source. To see a viz when editing or viewing a discovery board, you must have permission on that data source. Workday enforces contextual security, which determines what data displays for each user.

How Workday displays the discovery board depends on your data source access and board permission:

Example: A discovery board includes 2 vizzes total, one using the Workers for HCM Reporting data source and the other using the Journal Lines for Financial Reporting data source. The discovery board owner shared the discovery board with user Jennifer, giving her Can Edit permission and with users Ricardo and Shannon, giving them Can View permission. Jennifer has access to Journal Lines for Financial Reporting, but not to Workers for HCM Reporting. Ricardo has access to Workers for HCM Reporting, but not to Journal Lines for Financial Reporting. Shannon doesn't have permission on either data source.

With this tenant configuration, you should expect to observe these behaviors:

Jennifer is able to view and edit the discovery board.
When Jennifer views the discovery board in either view or edit mode, she sees 1 viz with data and a placeholder for the other viz with an error message. Workday displays an error message instead of the data in the viz that uses the Journal Lines for Financial Reporting data source because she doesn't have permission on that data source.
Ricardo is able to view the discovery board.
When Ricardo views the discovery board in view mode, he sees only the 1 viz that uses the Journal Lines for Financial Reporting data source. He doesn't see any indication that the board might contain other vizzes that he doesn't have permission on.
Shannon cannot view the discovery board because she doesn't have permission on any data source used in it.
Jennifer and Ricardo only see data records and field values that they have access to. The viz doesn't display records and field values they don't have access.
Jennifer and Ricardo only see fields that they have access to. Example: If a viz uses a data source they have access to, but it includes a field they don't have access to, then they can't view the data in the viz. Instead, they see a different error message.