Please read before continuing: You must create your Integration System User (ISU) in Workday before configuring permissions. If you haven't done that already, see our main guide here.
Overview
This guide will walk you through the permissions you need for BetterUp’s HCM integration with Workday.
Permissions
| Operation | Domain Security Policy | Functional Areas |
| Get Only | Worker Data: Public Worker Reports | Staffing |
| Get Only | Worker Data: Current Staffing Information | Staffing |
| Get Only | Worker Data: Worker ID | Personal Data |
| Get Only | Worker Data: Workers | Staffing |
| Get Only | Worker Data: Current Management Level Info | Staffing |
| Get Only | Person Data: Work Email | Contact Information |
What You're Adding: Performance-related (Recommended) domains and business process type to your existing BetterUp ISU, including:
| Operation | Domain Security Policy | Functional Areas |
| Get Only | Worker Data: Performance Reviews | Performance Enablement |
| Get Only | Worker Data: Employee Reviews | Performance Enablement |
| Get Only | Set Up: Employee Reviews / Set Up: Goals | Performance Enablement |
| Get Only | Process: Employee Reviews | Performance Enablement |
| Get Only | Process: Employee Reviews and Plans | Performance Enablement |
| Get Only | Worker Data: Review Event | Performance Enablement |
| Get Only | Talent Review | Talent Pipeline |
| Get Only | Worker Data: Talent | Talent Pipeline / Worker Profile and Skills |
| Operation | Business Process Type | Functional Area |
| View All | Start Performance Review | Performance Enablement |
Learning (LMS) domains
What You're Adding: Learning (LMS) domains to your existing BetterUp ISU, including:
| Operation | Domain Security Policy | Functional Areas |
| Get Only | Reports: Learning Record | Learning |
| Get Only | Manage: Learning Content | Learning |
| Get Only | Set Up: Learning Catalog | Learning |
| Get Only | Worker Data: Active and Terminated Workers | Staffing |
| Get Only | Workday Accounts | System |
NOTE: Worker Data: Current Staffing Information is also needed for LMS, but it is already in the article's main Permissions table. No change needed for that row.
Skills Cloud domains
What You're Adding: Workday Skills Cloud domains to your existing BetterUp ISU, including:
| Operation | Domain Security Policy | Functional Areas |
| Get Only | Person Data: Skill Level | Worker Profile and Skills |
| Get Only | Self-Service: Skill Level | Worker Profile and Skills |
| Get Only | Person Data: Skill Assessment Data | Worker Profile and Skills |
| Get Only | Self-Service: Skill Assessment Data | Worker Profile and Skills |
| Get Only | Worker Data: Skill Ratings | Worker Profile and Skills |
| Get Only | Self-Service: Skill Ratings | Worker Profile and Skills |
NOTE: Skills Cloud data also needs OAuth credentials. When connecting, the customer picks “Use my Workday credentials and also provide OAuth credentials,” and the OAuth user needs the same permissions as the ISU.
For a more detailed breakdown, see the Breakdown of Domains section below.
| Domain Security Policy | What BetterUp uses it for |
| Reports: Learning Record | Learning enrollments, assignments, and completions |
| Manage: Learning Content | Course catalog metadata |
| Set Up: Learning Catalog | Catalog structure and definitions |
| Worker Data: Active and Terminated Workers | Worker identity, including terminated workers |
| Worker Data: Current Staffing Information | Worker status and termination flag |
| Workday Accounts | Workday username, used to match Workday users to BetterUp members |
| Person Data: Skill Level / Self-Service: Skill Level | Skill levels recorded for each worker |
| Person Data: Skill Assessment Data / Self-Service: Skill Assessment Data | Skill assessment results for each worker |
| Worker Data: Skill Ratings / Self-Service: Skill Ratings | Skill ratings for each worker |
HCM & Performance Data — Required Fields
While BetterUp requires/recommends these specific fields, the GetWorkers API itself operates on a
Domain Based Access Control system. This means BetterUp receives the full contents of the domain, rather than exclusively these fields. BetterUp does not retain the excess data. The domains BetterUp requires for these fields is specified below.
| Field | Description / source field |
| CORE IDENTITY | |
| Worker ID | Unique Workday worker identifier; primary join key |
| Email address | Primary work email |
| Name | Worker full name |
| ORGANIZATION | |
| Geo / Country / Region | Worker location hierarchy |
| Function | Functional grouping |
| Business Unit | Business unit assignment |
| Cost Center | Cost center assignment |
| ROLE & EMPLOYMENT | |
| Title | Job title |
| Level | Job level / grade |
| Start Date | Tenure start date |
| Term Date | Employment termination date |
| Employment Status | Status of employees employment |
| Manager ID | Worker ID of the worker's manager |
| Manager Email Address | Email Address of the worker's manager |
| PERFORMANCE REVIEW DATA (Recommended) | |
| FIELD | DESCRIPTION / SOURCE FIELD |
| Performance rating | Overall review rating (manager and/or employee self-rating). |
| Review ID | Unique identifier for a specific review record. |
| Review cycle / template | Identifier for the review cycle or template. |
| Review period | Start and end dates of the period under review. |
| Review date | Date the review was initiated or completed. |
| Review comments | Manager and employee written comments / narrative. |
| Goals | Goal title, status, due/completion dates, owner. |
| Feedback | Feedback records (recipient, shared status, content). |
| LEARNING DATA (LMS) | |
| FIELD | DESCRIPTION / SOURCE FIELD |
| Learner ID | Workday worker ID of the enrolled worker (user_id) |
| Course ID | Unique identifier for the course (course_id) |
| Course name | Course title (course_name) |
| Course description | Course summary from the learning catalog (course_description) |
| Course status | Catalog status of the course, such as Active (course_status) |
| Course last changed | Date the course was last updated in the catalog (course_changed_at) |
| Enrollment ID | Unique identifier for the learning enrollment (progress_id) |
| Enrollment start date | Date the worker started the course (started_at) |
| Completion date | Date the worker completed the course (completed_at) |
| Completion status | Status of the enrollment, such as Complete (completion_status) |
| Progress percentage | Percent of the course completed (progress_percentage) |
| Enrollment last changed | Date the enrollment record was last updated (changed_at) |
| SKILLS DATA (Skills Cloud) | |
| FIELD | DESCRIPTION / SOURCE FIELD |
| Skill ID | Unique Workday identifier for the skill (skill_id) |
| Skill name | Name of the skill (skill_name) |
| Skill rating | Proficiency rating and where it came from, such as Advanced for Get Feedback (proficiency_level.rating) |
| Rating ID | Unique identifier for the rating record (proficiency_level.rating_id) |