Interview Questions: Security

Workday Security Interview Questions

There is no inheritance for business process security policies (true / false)

True

Roles are used to drive business process management (true / false)

Yes

Which type of security groups is optional and customer-defined?

Job Based Security Group is optional

What type of Security Group are these: Report Writer; Setup Administrator ?

User Based Security Group

Editing a security policy takes effect immediately? (true / false)

False (Need to ‘Activate Pending Security Policy Changes)

The following are true about User-Based Security Groups

Grants access across the system

Multiple people can be members if same user-based security group

Is it possible to activate a previous timestamp while making changes needed to fix present security configuration?

  Yes
   

 You may configure securable actions and securable reporting items in a domain security policy.

 False

The following report views permissions the specified user has an action & also security policies and groups that grant access

 Security Analysis for Action

What are the different ways to assign security groups?

By the system based on a process

Manually

 Is Report Writer a role-based security group

No

  Which of the following is not securable area of business process

 Create new sub-processes

 In case a secured item is included in more than one domain security policy, workers who are granted different levels of access permission in different domains get the most access granted

  True

The following report views all domain security policies and business process security policies that use the security group:          

      Action Summary for Security Group

  Editing a child security policy does not affect inheritance in any of the others

 True

 Which Security Group is required for you to access custom reports 

  Report Writer User Based Security Group

  Can a role-based security tag to more than one org?

 Yes

  In Security Breach, whom should you contact?

  security@workday.com

 What are the steps to create Role Based Security?

 Steps-Org Role>>Maintain Org Role>>Attach the Role

 What are the two components of Workday Security?

Domain Security

Business Security

 How to disable Functional area?

Maintain Functional area

How to activate security policy?

    Activate pending Security Policy

What determines access to landing page?

Security

Which Report is used to see the Security Policy?

View Security for Securable Item

      Defined tasks and reports that are functionally similar

      Domains

This dictates who can view / modify data w/in the domain

Domain Security Policies

What dictates who can participate in the business process

Business Process Policies

Type of security group automatically assigned based on user’s job criteria

Job based security group

   Security policies designate permissions for security groups to view, or view and modify tasks within the domain

      Domain Security Policy

     Security Policies contain such securable items as initiation steps, step actions, and actions on the process as a whole

      Business Process Security Policy

Can you reassign a task to anyone?

No (It can be assigned to the users who have relevant security group in BP Security Policy).

Which dictates who can participate in BP?

Business Process Security Policy

------------ are assigned to users  based on administrative responsibility

  User-based

 ------------ are found as a related action off worker’s name

  User-based

 ----------- are assigned to users are based on criteria selected

  Job based

 ------------- are used to only approve business process management tasks; they do not determine task or report access and cannot initiate a business process

Job roles

 --------- report views all details about security group membership, security policies in which the group is used, the permissions it has and the functional area

  View Security Group

 ------- is automatically assigned based on criteria selected

Job based

 ------------- is used to restore inheritance in a child policy

Use Parent Permissions

Workday Business Objects

Workday Business Objects

Workday architecture is Object based. Workday stores the data in business objects (BO).
A business object is like a spreadsheet, where each row is an instance of the object. Each column represents an attribute, or field, of the object.

For Example : A supplier is associated with supplier invoices, the invoice is associated with a supplier invoice payment and the payment is associated with a bank account. 

Below Snapshot shows how Business Objects are automatically connected. In the Workday Finance, the Supplier Business Object is linked to Contracts, Purchase Order, Parent/Child and Invoice. Here all of them are BO's.

Workday links related business objects together through single instance or multi-instance fields. Related Business Objects (RBO) enable you to access fields in a report that don’t belong to the Primary Business Object. (PBO)

Example: The Worker business object has a multi-instance field called Dependents. Dependents has a related business object of Dependent. In a report with a primary business object of Worker, you can use the Dependents field to access the fields belonging to the Dependent business object.

A report by name Business Object Details can be used to view:

• Custom and standard reports that use the business object.
• Data sources using the business object as the primary business object.
• Fields associated with the business object.
• Related business objects.

If you want to relate the workday terms with Database Management Systems like Oracle, MySQL, SQL Server, see below:

Workday Tenant Policies and Pricing

Tenant Policy and Pricing

Customers initially deploying the workday product for the first time will get below number of Initial tenants depending up on the size of the organization. Workers include both Employees and Contingent Workers (Contractors).

Core HR:

1. 3,501 - 20,000 Workers (4 Tenants)
2. 20,001 - 40,000 Workers  (5 Tenants)
3. Over 40,000 Workers  (5 Tenants)

Core Financials:

1. 3,501 - 20,000 Workers (5 Tenants)
2. 20,001 - 40,000 Workers  (5 Tenants)
3. Over 40,000 Workers  (6 Tenants)

Core HCM + Core Financials:

1. 3,501 - 20,000 Workers (7 Tenants)
2. 20,001 - 40,000 Workers  (7 Tenants)
3. Over 40,000 Workers  (8 Tenants)

Student Records or Admissions + Student Recruiting:

1. Less than 3000 Students (3 Tenants)
2. 3,501 - 9,999 Students (4 Tenants)
3. 10,000 - 19,999 Students (5 Tenants)
4. Over 20,000 Students (5 Tenants)

Adding other products like Payroll (1 Tenant) or Prism Analytics(2 Tenants) or Expense or Procurement (1 Tenant) will add the tenant count in addition to the above said.

Pricing:

It's not wise on my part to put the pricing, if you are interested please check the Community portal. 

All the pricing is dealt per month per tenant basis and categorized below number have different price attached to it.

# of Workers: <3,500

# of Workers: 3,501 - 10,000

# of Workers: 10,001 - 40,000

# of Workers: 40,001+

Points to Ponder:

• The additional tenants have a 3-month minimum duration.
• Customers can request to purchase a tenant by entering a purchase / renew tenant management request.
• Customers can purchase additional Implementation tenants at any time on a subscription basis, which can be used for training, implementing new functionality, testing changes to existing functionality, and more.
• The Initial HCM, Financials, and Student Implementation tenants expire 60 days after the customer’s Gold tenant is moved to Production. 
• The minimum duration for a purchased tenant is 3 consecutive months.
• The maximum duration for a purchased tenant is 1 year. A new order form will need to be processed after 1 year.
• At the end of the initial term, the tenant auto-renews on a 3 consecutive month bases for 1 year.
• Prism Analytics on additional tenant gives you 1 TB Storage with Published Rows up to 100,000,000

Additional Reads:

Workday Tenants