University of Wisconsin–Madison

Guide to Security Role Pairing in Workday

This article explains the concept of security role pairing in Workday and provides examples of paired HR security roles.

Role pairing facilitates security roles being assigned appropriately and efficiently for those who need multiple, complementary roles (paired roles) in order to do their job. Most paired roles are view-only roles.

  • When certain roles (base roles) are assigned, Workday automatically assigns one or more paired roles. Likewise, most paired roles are automatically removed when the base role is unassigned.
  • Some paired roles can also be assigned on an ad hoc basis. These are called standalone roles, and will remain assigned even if the base role is removed. For HR, the only standalone role is Academic Faculty Analyst, which can be assigned on its own or automatically assigned to employees with the roles Academic Faculty Executive, Academic Faculty Partner (AU), or Academic HR Partner (AU).
  • Since most paired roles are view-only roles, the paired roles are most often assigned to the top-level organization for UW-Madison. For example, HR Analyst UW is a paired role that is assigned to the top-level supervisory organization for UW-Madison, allowing broad, view-only access to HR data for all workers and positions at UW-Madison. This assignment happens automatically when the base role is assigned.
    • Exceptions for HR: The paired HR roles Payroll Analyst UW and Payroll Technician UW are always assigned system-wide access, allowing them to access payroll data for all workers throughout the Universities of Wisconsin. The paired role Academic HR Partner (Supervisory) UW, which is granted by the base role Academic HR Partner (AU), is assigned to the supervisory organization that corresponds with the academic unit that the base role is assigned for.
    • Additional Note: Employees who do not have a base role but need broad, view-only access to HR data can be assigned the non-paired role HR Data Analyst UW. This role should be assigned to the top-level UW-Madison supervisory organization.
  • Example: Casey is assigned the HR Process Coordinator (Supervisory) UW role for the Wisconsin School of Business. Workday then automatically assigns Casey the paired roles HR Analyst UW and Payroll Lite Analyst UW. Casey is assigned these roles for the top-level UW-Madison supervisory organization, giving Casey view-only access to HR data for all workers and positions on campus. Although he can view information for everyone at UW-Madison, Casey can still only transact on workers and positions within the School of Business.

To view a complete list of base roles and what paired roles they grant, consult the Roles which will be assigned too (partnered roles) column of the Simplified HR Security Role Catalog or the UW Security Catalog - Role and User-Based Groups report in Workday.

Updated: Jun. 20, 2025
Source URL: https://hr.wisc.edu/hr-guides/for-hr-professionals/guide-to-security-role-pairing-in-workday/

Did you find what you need?