Workforce-based approvers
Resolve a participant according to business unit, department, geography, worker type, or other report-provided metadata.
Turn workforce and organizational data into runtime routing context.
Roster connects to Workday JSON custom reports to resolve who should approve, own, review, receive, or handle work. Use worker and organizational data from your HR source of truth without reproducing workforce rules in every agent, workflow, or internal application.
Last verified 07/13/2026
Identity directories are useful for technical accounts and access groups. Workday can provide the workforce and organizational context behind business responsibility.
Roster uses selected Workday records to answer questions such as:
“Who reports to this manager?”
It asks:
“Who manages this employee?”
“Who should approve this request for the Canadian business unit?”
“Which HR group handles this employee case?”
“Who is currently responsible for this organizational role?”
Roster does not become another HR system. It uses configured report data as organizational context for participant resolution.
Roster reads JSON custom reports, including Workday report-as-a-service-style endpoints.
A typical configuration can include a users report, an optional groups report, and an optional group-members report.
When an administrator searches Workday records from Roster, the connector loads and filters the configured report data.
Selected records are materialized in Roster. Scheduled refresh updates the selected records and attached membership relationships used by participant resolution.
Resolve a participant according to business unit, department, geography, worker type, or other report-provided metadata.
Associate workers or organizational groups with participants representing HR, management, payroll, or employee-services responsibilities.
Route requests to the appropriate participant based on location, operating company, or regional responsibility.
Resolve the correct person or group for employee, finance, procurement, compliance, or operational escalations.
Combine Workday-derived workforce context with time-bound Roster delegations.
The Workday report determines which workers and groups are available. Roster determines how they participate in a particular workflow.
Stable external IDs are essential because they allow Roster to refresh a selected record without relying on a changeable name or email address.
Participants can carry metadata such as: Region, Business unit, Worker type, Cost center, Case category, Escalation level.
Once workforce records back Roster participants, the same organizational context is available across every Roster surface.
Let an MCP-compatible AI client resolve workforce responsibility.
Add workforce-backed participant resolution to internal apps and workflow engines.
Resolve ownership and sign-off from the terminal or a pipeline.
Administrators associate Workday-derived records with participants and manage delegations.
| Report data | Used by Roster | Materialized in Roster |
|---|---|---|
| Stable worker ID | Yes | For selected workers |
| Worker name | Yes | For selected workers |
| Username | When mapped | For selected workers |
| Primary email | When mapped | For selected workers |
| Stable group ID | When groups are configured | For selected groups |
| Group name | When groups are configured | For selected groups |
| Group membership edges | When configured | For selected groups |
| Payroll details | No | No, unless deliberately mapped |
| Compensation data | No | No |
| Sensitive HR case data | No | No |
The users report should expose fields that can be mapped to:
external_id
display_name
primary_email
user_nameWhen groups are used, the groups report should expose:
external_id
display_name
mailThe optional group-members report should expose:
group_external_id
user_external_idOnly expose fields needed for participant resolution in the configured custom reports.
Roster uses configured report data both interactively and at runtime.
When an administrator searches Workday users or groups, Roster loads the configured report data and applies the connector's search and field mappings.
Once records have been selected, REST, MCP, CLI, and Resolve operations use the materialized Roster records. The background refresh updates only the selected records and associated group memberships used in Roster.
You need:
Store the report password outside source control:
env:WORKDAY_REPORT_PASSWORDThe Roster connector uses the report output you explicitly configure. Control the available rows and fields through the Workday report definition and associated security policy.
Workday and an identity directory do not need to compete as a single source.
Provides workforce and organizational context (who works where, in which unit, under which manager).
Entra ID, Okta, or Google Workspace can provide current identity groups. Roster participants express workflow responsibility across whichever source is authoritative.
The intended source depends on the responsibility being resolved. Roster delegations add temporary coverage on top of either.
An employee-services workflow receives a request involving a Canadian employee.
It asks:
“Who should review this employee-relations request for Canada?”
Roster evaluates:
The workflow receives the participant that should act and continues through the existing case-management or approval system.