Passer au contenu principal
Documentation
Documentation
Workday User Guide
Dernière mise à jour : 2024-11-01
Set Up Segmented Security by Compensation Plans

Set Up Segmented Security by Compensation Plans

  • Analyze your organization's needs and decide whether segmented security for compensation is appropriate. Evaluate your current organizational structure and thoroughly understand segmented security requirements.
  • Configure organizational hierarchies, security groups, and organizational roles.
    The use of segmented security groups won't apply to every business; it involves a number of complex steps and impacts your overall compensation practice. Even if you currently use location hierarchies for other purposes, your current hierarchies might not be adequate for restricting access to compensation components. Also, intersection security, constrained job-based security groups, and rule-based security groups aren't supported for Compensation.
  • Create location hierarchy organizations that parallel the segments you need.
  • Security:
    • Set Up: Compensation Security Segments
       domain in the System functional area.
    • Set Up: Tenant Setup - HCM
       domain in the System functional area.
    • Set Up: Assignable Roles
       domain in the Organization and Roles functional area.
    • Reports: Organization
       domain in the Organization and Roles functional area.
    • Security Configuration
       domain in the System functional area.
    • Worker Data: Non-Funded Plan Assignments
       in the Core Compensation functional area.
    • Self-Service: Non-Funded Plan Assignments
       in the Core Compensation functional area.
Segmented security groups divide access to Compensation setup data (such as Compensation Plans) among multiple Compensation Partners. Example: A business with sites in Canada, the U.S., and Mexico might require a separate Compensation Partner for each country with appropriate access to the setup data.
Compensation Administrators need access to all compensation segments you create, no matter how you decide to segment your organization's compensation groups.
  1. Enable the segmented security group feature for compensation.
    1. Access the
      Edit Tenant Setup - HCM
       task.
    2. In the
      Compensation
       section, select the
      Enable Compensation Setup Segment Security
       check box.
  2. Enable the
    Compensation Partner
     role for the
    Location Hierarchy
     organization type.
    1. Access the
      Maintain Assignable Roles
       task.
    2. In the
      Enable for Organization Types
       column, add
      Location Hierarchy
       to any organization types already enabled.
  3. In the applicable location hierarchy organization, assign the
    Compensation Partner
     role to the desired worker.
    1. Access the
      View Organization
       task.
    2. Open the applicable location hierarchy organization.
    3. From the related actions menu, select
      Roles
      Assign Roles
      .
    4. In the
      Assign Roles
       section, select
      Compensation Partner
       as the
      Role
      , and select the desired
      Worker
       to whom the
      Role
       should be assigned.
  4. Create an organization membership security group that includes the applicable location hierarchy.
    1. Access the
      Create Security Group
       task.
    2. For
      Type of Group
      , select
      Organization Membership Security Group
      .
    3. In the list of
      Organizations
      , add the desired location hierarchy to the security group.
    4. Specify whether the new organization membership security group
      Applies to Current Organization Only
       or
      Applies to Current Organization And All Subordinates
      .
  5. Create an intersection security group that includes the applicable organization membership security group and the Compensation Partner security group.
    1. Access the
      Create Security Group
       task.
    2. For
      Type of Group
      , select
      Intersection Security Group
      .
    3. In the list of
      Security Groups
      , add the desired organization membership security group and the Compensation Partner security group.
  6. Create a security segment for the desired compensation component, such as country.
    1. Access the
      Create Compensation Setup Security Segment
       task.
    2. Select the
      Pay Component
       (or set of components) to contain within the segment.
  7. Create a segment-based security group that joins the applicable intersection security group with the applicable security segment. This is a critical step that ties together the preceding steps.
    1. Access the
      Create Security Group
       task.
    2. For
      Type of Group
      , select
      Segment-Based Security Group
      .
    3. In the list of
      Security Groups
      , add the applicable intersection security group.
    4. In the list of
      Access Rights
      , add the applicable security segments.
  8. Repeat steps 3 through 7 for each secured compensation segment you want to create.
  9. Create a segment-based security group for the Compensation Administrator that joins the Compensation Administrator with all the security segments created.
  10. To use any new segment-based security group that you've created, update and activate the domain security policy and business process security policy for the Compensation functional area.
    1. Access the
      Functional Areas
       report.
    2. From the related actions menu for Core Compensation and Advanced Compensation, select
      Functional Area
      View Business Process Policies
       (or
      View Domain Policies
      ).
    3. Click
      Edit Permissions
      .
    4. Add the segment-based security group to the applicable domain security policy/business process security policy.
    5. Delete the
      Compensation Partner
       security group from the applicable domain security policy/business process security policy.
    6. Access the
      Activate Pending Security Policy Changes
       task to confirm changes.
You can use the
All Compensation Setup Security Segments
 report to review which intersection groups constrain the segment-based security groups for a particular compensation segment or component.

Ce contenu ne fait pas partie du Guide de l'administrateur Workday.