Both Role-Based (Unconstrained) and User-Based security groups provide access that is not limited by organizational context or hierarchy. A Role-Based (Unconstrained) group grants its members permissions to all instances of the secured data across the entire tenant. Similarly, a User-Based security group is inherently unconstrained; it grants specified users direct access to all data secured by a domain system-wide. Since both groups are granted access to the domain securing the Staffing tab, members of both groups will be able to view this tab for all supervisory organizations in the Workday tenant.

A. This is incorrect because Role-Based (Unconstrained) security provides access to all organizations, not just those a user is assigned to support.

B. This is incorrect because User-Based security is also unconstrained, granting access to all organizations, not just a supported subset.

D. This is incorrect because it describes the behavior of constrained security groups, whereas both groups in the scenario are unconstrained.

1. Workday Security Administration Documentation; Section: Security Group Types. This official guide details the different types of security groups. It specifies that User-Based security groups are unconstrained and provide access to data across the entire Workday tenant. For example

an Auditor role assigned via a User-Based group would have tenant-wide access.

2. Workday Security Administration Documentation; Section: Role-Based Security Groups. This section distinguishes between constrained and unconstrained role-based groups. It explicitly states that unconstrained roles

such as Security Administrator or Implementer

have permissions that are not limited by their organizational assignments and apply tenant-wide.

3. Cornell University

Workday Training & Resources; Document: Workday Security Roles. Courseware materials from institutions implementing Workday often clarify these core concepts. Such materials explain that unconstrained roles are for central administrators needing system-wide access

while user-based groups are for specific individuals needing similar broad access outside of a standard organizational role. (Reference to general university implementation documentation principles).