Which security group is assigned directly to a worker?

• A. Role-based security group
• B. Organization-based
• C. System-based
• D. User-based

Answer: (D)

In Workday, access is controlled through security groups that can be applied in different scopes. A user-based security group is assigned directly to an individual worker’s profile, giving that person specific permissions independent of any role or organization they belong to. This means the access is tailored to that one worker and does not automatically apply to others who share a role or belong to the same organization. The other types—role-based security groups attach to a role (and flow to all workers with that role), organization-based security groups attach to all workers in an organization, and system-based security groups are used for internal system accounts or processes. Therefore, the security group assigned directly to a worker is the user-based one.