Wednesday, September 2

Security Related Question and Answers

Security Related Question and Answers


Below Q & A gives you a better deal to understand which task or report to use based on the scenario.

What can a security group do? What does it have access to? 
View Security Group 
Security Analysis for Security Group 
Action Summary for Security Group

How can I tell what security policy to update for a given item?
View Security for Securable Item 

How can I tell what security groups a user has? 
View Security Groups for User

How can I compare access between users?
Compare Security of Workday Accounts 

How can I compare security groups? 
Security Analysis for Security Groups

Who are the members of a security group?
If user-based, use View Security Group.
If not, write a custom report (PBO: Security Group, Report Field: Members).

How can I find out if a user is a member of a given security group? 
Test Security Group Membership

How can I tell if a user has access to a given target using a given security group?
Test Security Group Membership 

How did this user get to this task or item? What security group allowed it? 
Security Analysis for Action

Given a user’s security groups, what is their cumulative access in tenant?
Security Analysis for Workday Account 

How do I add or remove a security group from multiple domain security policies at once?
Maintain Permissions for Security Group

How can I tell who has access to a given task or item?
View Security for Securable Item

How can I see all the roles that are defined in tenant? 
View Assignable Roles

What if I need to add new roles?
Maintain Assignable Roles

How can I tell what roles are unassigned? 
Unassigned Organization Roles Audit 
Unassigned Roles Audit 
Unfilled Assigned Roles Audit

How can I tell what role assignments exist for a given worker?
Role Assignments for Worker Position 

How can I tell what role assignments exist for a given organization? 
Roles for Organization and Subordinates 
Worker Roles Audit

How can I tell which security groups are allowed to assign workers to each role?
Role Assignment Permissions

How can I see all the domains and business processes available for a given functional area? 
Functional Areas

How can I see the current security configuration for a given functional area?
Domain Security Policies for Functional Area
Business Process Security Policies for Functional Area 

How can I see all the security groups in the tenant? 
View Security Group

How can I see a full list of reports around security?
Run Workday Standard Reports for security-related categories. You can also write custom reports using security-related data sources.

How can I see an audit trail of changes to security policies? Who did what, and when? 
Domain Security Policy History 
Business Process Security Policy History 
Domain Security Policies Changed within Time Range 
Business Process Security Policies Changed within Time Range 
Audit Trial - Security

How can I audit a given Workday Account?
View User or Task or Object Audit Trail

How can I audit what a user viewed or changed? 
View User Activity

How can I see a history of security changes for either an organization (e.g., role assignments) or for a worker?
Security History
Security History for User

How can I activate changes to security policies? 
Activate Pending Security Policy Changes

Can I select which pending security policies to activate?
No – The Activate Security Policy Changes task will activate all pending security policy changes in the tenant since the last activation. 

If there is more than one person making security policy changes in the tenant, when one person activates pending security policy changes will it only activate that person’s changes? 
No – the Activate Security Policy Changes task will activate all pending security policy changes in the tenant since the last activation, regardless of who made the change.

How can I see what security policy edits are pending activation?
Domain Security Policies with Pending Changes
Business Process Security Policies with Pending Changes 

How can I revert back to a previous security configuration in the tenant? 
Activate Previous Security Timestamp

When I activate a previous timestamp, do my changes since that timestamp get removed or deleted?
No – your changes will still be there but instead in a pending state. You must edit the security policy manually to correct or remove the changes. 

How can I see how many times security has been activated in tenant? 
View All Security Timestamps

How can I see if there are issues with the security configuration?
Security Exception Audit

No comments:

Post a Comment