Security

Important Considerations

• Security roles are not job titles.
• Security roles are assigned to the position, not the person. Should an employee change positions, all viewer access or available actions and approvals would stay with the position. New employees hired into the position will automatically be granted the security roles associated with that position.
• Security roles allow employees to functionally support the organization(s) to which they are assigned. Security roles allow employees to support their Academic Unit, Company, Cost Center, Gift, Grant, Project, Supervisory Organization, USource, etc. 
• View-Only role access grants users permission to view items without permitting access to complete actions or modify the data.

Terminology

• Employee as Self – All workers have the Employee as Self role in Workday. See the Employee Self-Service Learning Hub for more information about the self-service tasks a worker can complete.
• Manager – The manager of a supervisory organization is automatically assigned the Manager role in Workday. Typically, these individuals supervise one or more direct reports. One manager can manage multiple supervisory organizations.
• Campus Unit – Campus Unit refers to a type of security role which is assigned to support the activities of specific campus units such as a department, division, or college. For example, an individual in UMD’s College of Behavioral and Social Sciences (BSOS) could be assigned as an HR Analyst to support the HR activities of that particular college.
• Central Office – Central Office (or Central) refers to a type of security role which is assigned to support the overall activities of the institution whose actions can impact multiple campus units. For example, the Central Absence Partner is a central office role assigned to support multiple campus units across the university.

Reports

• Role Assignments for Worker Position (from the worker profile, not searchable) – This report allows an employee to access a list of the roles to which their position has been assigned and the associated organization each role is assigned to support. Employees can access this report by visiting their worker profile, selecting Actions, navigating to the Security Profile submenu, and then clicking the name of the report. Managers can also access this report for the team members to which they support. Similarly, they must navigate to the employee's worker profile to access this report.
• View Support Roles (from the worker profile, not searchable) – This report allows employees to access a list of individuals assigned to each role supporting the organizations to which they belong. Employees can access this report by visiting their worker profile, selecting the Job section from the menu to the left, and then selecting the Support Roles tab at the top. Managers can also access this report for the team members they support. Similarly, they must navigate to the employee's worker profile to access this report.