Steps: Manage Access to Documents

You can use segmented security to control who can create, edit, or view documents within specified document category.

Examples:

Configure security to enable benefits administrators to manage benefits documents only.

Enable managers to view workers' employment documents but not their personal documents.

The

Reviewed Documents

section on the worker profile includes the

Standard Documents

and the

Generated Documents

grids. Workday secures the

Standard Documents

grid using these domains:

Worker Data: Add Worker Documents

Self-Service: Add Worker Documents

Workday secures the

Generated Documents

grid using these domains:

Worker Data: View Generated BIRT Documents

Self-Service: View Generated BIRT Documents

Ensure that you have access to these domains to view worker documents on worker profiles if you're associated with the business process that routes the document.

Set Up Document Categories.

Access the

Create Document Category Security Segment

task.

Create a security segment for each document category.

Security: Document Categories Segmented Setup
domain in the System functional area.

Create Segment-Based Security Groups.

Configure segment-based security groups to provide access to documents in each security segment.

Repeat this procedure for each security segment that you created in step 2.

Edit Domain Security Policies.

Edit the Document Library
domain in the System functional area and these domains in the

Person Data: Personal Data

section of the Personal Data functional area:

Worker Data: Add Worker Documents

Worker Data: Edit and Delete Worker Documents

In the

Report/Task Permissions

section, add the new segment-based security groups and remove all existing security groups that are restricted by the new segment-based security groups.

You can only add segment-based security groups to When you have a security group on the domain security policy and in a segment-based security group that is on the domain, the segment-based security group doesn't work.

Security: Security Configuration
in the System functional area.

Activate Pending Security Policy Changes.

(Optional) Maintain Worker Documents.

Provide access to all worker document categories for users who aren't members of a segment-based security group.

On the

Maintain Worker Documents

task, you can view documents attached through a business process when you have View permissions on the business process security policy.

Concept: Security Policies

Create Segment-Based Security Groups