Workday Setup
Setup Overview
You will need to provide the following to Moveworks.
- Integration System User (ISU) Credentials
- Username
- Password
- API Client for Integrations Credentials
- Client ID
- Client Secret
- API Client Refresh Token for the ISU
- URLs
- Any RaaS-Enabled Report URLs
- Approval Retrieval
- Time Off Details
- Token Endpoint
- Workday REST API Endpoint
- End User URLs
- Workday Home Page
- Absence Calendar
- Any RaaS-Enabled Report URLs
👉 Provide provide ALL of the above to your Moveworks Customer Success Engineer via encrypted email.
Grant ISU Domain Security Permissions
Please create an Integration System User (ISU) and Integration System Security Group (ISSG). For detailed instructions, see our helper guide on How to Create an ISU with Domain Security Permissions
Pro Tip
You can click on the headers of the table below to sort by Permission Type for easy copy-pasting.
| Modify | Workday Query Language | Needed to identify users |
| Modify | Custom Report Creation | Needed to identify users |
| Modify | Workday Accounts | Needed to identify users |
| Modify | Person Data: Work Contact Information | Needed to identify users |
| View | Worker Data: Public Worker Reports | Needed to identify users |
| View | Worker Data: Workers | Needed to identify users |
| View | Custom Report Creation | Needed to identify users |
| Put | Workday Query Language | Needed to identify users |
| Put | Workday Accounts | Needed to identify users |
| Put | Person Data: Work Contact Information | Needed to identify users |
| Get | Worker Data: Public Worker Reports | Needed to identify users |
| Get | Worker Data: Workers | Needed to identify users |
| Get | Worker Data: Worker ID | Needed to identify users |
| Get | Indexed Data Source: Workers | Needed to identify users |
| Put | Business Process Administration | Needed to take approval actions (approve / deny) |
| Put | Business Process Definition View | Needed to take approval actions (approve / deny) |
| Put | Business Process Delegation | Needed to take approval actions (approve / deny) |
| Put | Business Process Reporting | Needed to take approval actions (approve / deny) |
| Put | Integration Event | Needed to take approval actions (approve / deny) |
| Put | Integration Process | Needed to take approval actions (approve / deny) |
| Modify | Business Process Administration | Needed to take approval actions (approve / deny) |
| Modify | Business Process Definition View | Needed to take approval actions (approve / deny) |
| Modify | Business Process Delegation | Needed to take approval actions (approve / deny) |
| Modify | Business Process Reporting | Needed to take approval actions (approve / deny) |
| Modify | Integration Event | Needed to take approval actions (approve / deny) |
| Modify | Integration Process | Needed to take approval actions (approve / deny) |
| View | Worker Data: Leave of Absence | Needed to get details for leave of absence requests |
| View | Worker Data: Leave of Absence (Leave of Absence Manager View) | Needed to get details for leave of absence requests |
| Get | Worker Data: Absence Occurrences | Needed to get details for leave of absence requests |
| Get | Worker Data: Absence Occurrences (Manager View) | Needed to get details for leave of absence requests |
| Get | Worker Data: Leave of Absence (Leave of Absence Manager View) | Needed to get details for leave of absence requests |
| View | Worker Data: Time Off (Time Off Balances) | Needed to retrieve time off balances for a given worker |
| View | Worker Data: Time Off (Time Off Balances Manager View) | Needed to retrieve time off balances for a given worker |
| Get | Worker Data: Time Off (Time Off Balances) | Needed to retrieve time off balances for a given worker |
| Get | Worker Data: Time Off (Time Off Balances Manager View) | Needed to retrieve time off balances for a given worker |
Create API Client for Integrations
Please create an API Client for Integrations and provide the following function areas (scopes). Then create a refresh token for the ISU you created earlier.
For detailed instructions, see our helper guide on How to Create an API Client for Integrations
| Staffing | Needed to identify users |
| System | Needed to identify users & run RaaS reports |
| Tenant Non-Configurable | Needed to identify users & run RaaS reports |
| Contact Information | Needed to identify users |
| Public Data | Needed to identify users |
| Time Off and Leave | Needed for time off plans, time off requests, and leaves of absence |
| Time Tracking | Needed for time off plans, time off requests, and leaves of absence |
Create RaaS-Enabled Reports
Create each of the following reports into your Workday instance. Transfer ownership to our ISU, then share the JSON URL with your Moveworks Customer Success Team. Please follow our instructions on How to Create a RaaS-Enabled Report
Approval Retrieval Report
How it is used
We use this report to detect when new approvals are pending in your Workday instance.
Prompt Instructions
When generating the JSON URL, provide any Business Process Definitions that you would like Moveworks to support.
Time Off Details by ID Report
How it is used
We use this report to get time off details for our approval notifications.
Prompt Instructions
You can provide any values for the prompts when generating the JSON URLs, it doesn't matter.
Adjust Business Processes
Create a User-Based Security Group and assign our ISU to it. Then, update the Business Process Security Policy to grant Moveworks the permissions to review the relevant action steps. Then, update the Business Process Definition to add your User-Based Security Group to the Approval step(s).
For detailed instructions, see our helper guide on How to Edit Business Processes for Approvals
| Request Time Off | Review Time Off Request |