A user-based security group has workers as members. When used in a security policy, it grants access to the securable items to all members of the group.

A security group is a collection of users, or a collection of objects that are related to users. Allowing a security group access to a securable item in a security policy grants access to the users associated with the security group.

Roles define a group of people with specific responsibilities and permissions. When a business process runs, the role for each step includes all of the workers in that role in the business process target organization.

A role-based security group specifies one organization role and includes workers in job positions defined for that organization role.

Workers are assigned to the predefined security groups through a business process. These groups cannot be changed except by reversing the business process or executing a new business process, such as applying for a position, or being hired. Examples include: Employee, Contingent Worker, and Applicant.

An organization security group is one whose members are any workers assigned to that organization.

A location membership security group is one whose members are any workers assigned to that location.

A job-based security group includes one or more job-related attributes or objects including job profile, job family, job category, management level, or exempt/non-exempt status.

An intersection security group is one whose members are other security groups. Workers associated with all included security groups are granted access through an intersection security group.

Ability to extend Workday business objects by creating custom object definitions based on the business object and adding custom fields. Custom objects enable you to record additional data for which there's no Workday-delivered field. - Business objects are used to store data in Workday (such as organizations or workers). A business object has fields and instances, which are analogous to rows and columns in a spreadsheet.