> ## Documentation Index
> Fetch the complete documentation index at: https://docs.parable.work/llms.txt
> Use this file to discover all available pages before exploring further.

# Workday

> Extract employee, organization, payroll, absence, and time tracking data from Workday REST APIs (Staffing, Payroll, Absence Management, Time Tracking)

Extract employee, organization, payroll, absence, and time tracking data from Workday REST APIs (Staffing, Payroll, Absence Management, Time Tracking).

<Tabs>
  <Tab title="Overview">
    Connect Parable to Workday via **OAuth 2.0 client credentials** for REST API access to staffing, organization, payroll, absence, and time tracking data.

    > **Info:** For **RaaS custom reports** (pre-encoded report token + report URL), use [**Workday HRIS RaaS**](/plugins/provider-plugins/workday_raas) instead.

    > **Info:** **Workday does not use OAuth scope strings** (unlike Salesforce `api` or Google `https://www.googleapis.com/auth/...`). Access is controlled by two layers you configure in Workday:
    >
    > 1. **Functional areas** on the API client (labeled **Scope (Functional Areas)** on the registration form)
    > 2. **Domain security policies** on the Integration System User's security group (GET/View permissions)
    >
    > Parable sends a client-credentials token request with **no `scope` parameter**. If either layer is missing, token exchange or API calls fail with `403 Forbidden` or empty field sets.

    #### Staffing & Organizations

    Workers, positions, job requisitions, org hierarchy, org chart

    #### Payroll, Absence & Time

    Payroll inputs, payment elections, pay slips, absence balances, time off, time blocks

    This integration uses **OAuth 2.0 Client Credentials** flow for server-to-server authentication.

    #### How It Works

    1. Your app sends **Client ID** and **Client Secret** to the token endpoint
    2. Workday returns a short-lived **access token** (typically 1 hour)
    3. Use the access token in API requests
    4. When expired, request a new token (automatic in Parable)

    #### Token Request

    ```bash cURL theme={null}
    curl -X POST "https://YOUR_SERVICES_HOST/ccx/oauth2/YOUR_TENANT/token" \
      -H "Content-Type: application/x-www-form-urlencoded" \
      -d "grant_type=client_credentials" \
      -d "client_id=YOUR_CLIENT_ID" \
      -d "client_secret=YOUR_CLIENT_SECRET"
    ```

    ```python Python theme={null}

    response = requests.post(
        "https://YOUR_SERVICES_HOST/ccx/oauth2/YOUR_TENANT/token",
        data={
            "grant_type": "client_credentials",
            "client_id": "YOUR_CLIENT_ID",
            "client_secret": "YOUR_CLIENT_SECRET"
        }
    )

    access_token = response.json()["access_token"]
    print(f"Access Token: {access_token}")
    ```

    #### Using the Access Token

    ```http theme={null}
    Authorization: Bearer {access_token}
    ```

    > **Info:** Parable automatically handles token refresh, so you don't need to manage token expiration manually.

    Parable does **not** send a `scope` query parameter on the token request. Required access is enforced by the API client's functional areas and the ISU domain policies configured in Workday.

    Grant the functional areas and domain permissions above for **all** rows below. Child endpoints are fetched from parent worker or organization IDs.

    | Parable data                    | REST endpoint                                 | API version          | Functional area (Scope) |
    | ------------------------------- | --------------------------------------------- | -------------------- | ----------------------- |
    | `workers`                       | `/workers`                                    | staffing/v7          | Staffing                |
    | `positions`                     | `/positions`                                  | staffing/v7          | Staffing                |
    | `job_requisitions`              | `/jobRequisitions`                            | staffing/v7          | Staffing                |
    | `organizations`                 | `/organizations`                              | staffing/v7          | Organizations and Roles |
    | `supervisory_organizations`     | `/supervisoryOrganizations`                   | staffing/v7          | Organizations and Roles |
    | `org_members`                   | `/supervisoryOrganizations/{org_id}/members`  | staffing/v7          | Organizations and Roles |
    | `org_chart`                     | `/supervisoryOrganizations/{org_id}/orgChart` | staffing/v7          | Organizations and Roles |
    | `payroll_inputs`                | `/payrollInputs`                              | payroll/v2           | Payroll                 |
    | `payment_elections`             | `/paymentElections`                           | payroll/v2           | Payroll                 |
    | `worker_pay_slips`              | `/workers/{worker_id}/paySlips`               | payroll/v2           | Payroll                 |
    | `absence_balances`              | `/balances`                                   | absenceManagement/v2 | Absence Management      |
    | `worker_leaves_of_absence`      | `/workers/{worker_id}/leavesOfAbsence`        | absenceManagement/v2 | Absence Management      |
    | `worker_eligible_absence_types` | `/workers/{worker_id}/eligibleAbsenceTypes`   | absenceManagement/v2 | Absence Management      |
    | `time_off_details`              | `/workers/{worker_id}/timeOffDetails`         | absenceManagement/v2 | Absence Management      |
    | `worker_time_blocks`            | `/workerTimeBlocks`                           | timeTracking/v5      | Time Tracking           |

    > **Info:** Organization endpoints live under the **staffing/v7** REST path but require the **Organizations and Roles** functional area (Scope) on the API client.

    ## Data streams

    This Provider Plugin defines 15 data streams.

    | Stream                          | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                | Sync        |
    | ------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------- |
    | `workers`                       | Employee and contingent worker records from the Staffing API                                                                                                                                                                                                                                                                                                                                                                                                               | full        |
    | `positions`                     | Extracts all position records (open and filled) from the Workday Staffing REST API. Positions represent authorized headcount slots within the organization. Paginated via offset/limit. Full sync only.                                                                                                                                                                                                                                                                    | full        |
    | `job_requisitions`              | Extracts all job requisition records from the Workday Staffing REST API. Job requisitions represent approved requests to fill positions. Paginated via offset/limit. Full sync only.                                                                                                                                                                                                                                                                                       | full        |
    | `organizations`                 | Extracts all organization records from the Workday Staffing REST API. Organizations represent supervisory, cost center, company, and other org structures. Paginated via offset/limit. Full sync only.                                                                                                                                                                                                                                                                     | full        |
    | `supervisory_organizations`     | Supervisory organization hierarchy from the Staffing API                                                                                                                                                                                                                                                                                                                                                                                                                   | full        |
    | `org_members`                   | Members of a supervisory organization                                                                                                                                                                                                                                                                                                                                                                                                                                      | full        |
    | `org_chart`                     | Organization chart for a supervisory organization                                                                                                                                                                                                                                                                                                                                                                                                                          | full        |
    | `payroll_inputs`                | Payroll input records from the Payroll API                                                                                                                                                                                                                                                                                                                                                                                                                                 | incremental |
    | `payment_elections`             | Payment election rules from the Payroll API                                                                                                                                                                                                                                                                                                                                                                                                                                | full        |
    | `worker_pay_slips`              | Pay slips for a worker from the Payroll API                                                                                                                                                                                                                                                                                                                                                                                                                                | full        |
    | `absence_balances`              | Extracts absence/accrual balance records for workers from the Workday Absence Management REST API. Returns balance data per worker per absence type. Supports filtering by worker ID and effective date. Paginated via offset/limit with a default page size of 20 and max of 100. Full sync only; no incremental field documented.                                                                                                                                        | full        |
    | `worker_leaves_of_absence`      | Extracts leave-of-absence records for each worker from the Workday Absence Management REST API. This is a child endpoint traversed per worker. Returns leave records with fields including effectiveDate, dateOfFirstAbsence, stopPaymentDate, singleParentIndicator, multipleChildIndicator, and childsDateOfDeath. Traversal is required: one call per worker ID obtained from the workers tap.                                                                          | full        |
    | `worker_eligible_absence_types` | Extracts the absence/leave types that each worker is eligible for, from the Workday Absence Management REST API. This is a child endpoint traversed per worker. Useful for understanding leave entitlements and work taxonomy. One call per worker ID.                                                                                                                                                                                                                     | full        |
    | `time_off_details`              | Time off detail records per worker from the Absence Management API                                                                                                                                                                                                                                                                                                                                                                                                         | incremental |
    | `worker_time_blocks`            | Extracts time block records for workers from the Workday Time Tracking REST API. Time blocks represent individual time entries logged by workers. Uses the explicit service path for Time Tracking. Paginated via offset/limit. Note: the /v1/ shortcut returns 404 for Time Tracking; the explicit versioned path is required. Confidence in exact query parameters is moderate — consult Time Tracking API docs for additional filter params (e.g., startDate, endDate). | full        |
  </Tab>

  <Tab title="Setup Guide">
    ### Workday

    #### What You'll Need

    | Credential        | What it is                                                                       |
    | ----------------- | -------------------------------------------------------------------------------- |
    | **Client ID**     | OAuth 2.0 client ID from **Register API Client for Integrations**                |
    | **Client Secret** | OAuth 2.0 client secret (shown once at registration)                             |
    | **Tenant Name**   | Workday tenant identifier (subdomain in `{tenant}.workday.com`)                  |
    | **Base URL**      | *(Optional)* Workday **services** host override (see **Tenant URLs** setup step) |

    > **Info:** **Setup access in Workday.** These steps require **Integration System Administrator** or **Security Administrator** privileges, or a colleague who can create API clients and edit domain security on your behalf.

    * **OAuth 2.0 enabled** on the tenant (**Edit Tenant Setup - Security**; confirm OAuth 2.0 clients are allowed)
    * Permission to run **Register API Client for Integrations**
    * Permission to create Integration System Users and Integration System Security Groups
    * Permission to edit **Domain Security Policy Permissions** and run **Activate Pending Security Policy Changes**

    Complete Workday security setup **before** registering the API client. Workday evaluates API access from the Integration System User's domain policies, not from the admin who registered the client.

    #### Step 1: Create Integration System User

    1. Search: **Create Integration System User**
    2. Create a dedicated user (for example `ISU_Parable_Integration`)
    3. Set a strong password and note the username
    4. Enable **Do Not Allow UI Sessions** when available

    This ISU is the **authorization context** for every API call Parable makes. The API client authenticates with client ID and secret; the ISU's security group determines what data is returned.

    #### Step 2: Create Integration System Security Group

    1. Search: **Create Security Group**
    2. Type: **Integration System Security Group**
    3. Name: `Parable Integration Security Group`
    4. Add your Integration System User as the only member
    5. Save the group

    #### Step 3: Grant Domain Security Permissions

    Search: **Domain Security Policy Permissions** (or **Domain Security for Functional Area**).

    For each domain below, add your **Integration System Security Group** with **Get** or **View** access only. Do **not** grant Put, Post, or Modify.

    > **Warning:** Domain names vary by tenant and Workday release. Filter by functional area in Workday and search for the keywords below if the exact label differs.

    **Staffing**

    | Domain (search keywords)                                     | Used for                                       |
    | ------------------------------------------------------------ | ---------------------------------------------- |
    | Worker Data: Public Worker Reports                           | Worker identity and public profile fields      |
    | Worker Data: Current Staffing Information                    | Job, employment, and manager fields on workers |
    | Worker Data: All Positions                                   | Positions tap                                  |
    | Recruiting / Job Requisitions *(if separate in your tenant)* | Job requisitions tap                           |

    **Organizations and Roles**

    | Domain (search keywords) | Used for                                    |
    | ------------------------ | ------------------------------------------- |
    | Organization and Roles   | Organizations and supervisory organizations |
    | Supervisory Organization | Org members and org chart child endpoints   |

    **Payroll**

    | Domain (search keywords)    | Used for                                    |
    | --------------------------- | ------------------------------------------- |
    | Payroll Input               | Payroll inputs tap                          |
    | Payment Election            | Payment elections tap                       |
    | Worker Pay Data / Pay Slips | Worker pay slips tap (traversed per worker) |

    **Absence Management**

    | Domain (search keywords)                        | Used for                          |
    | ----------------------------------------------- | --------------------------------- |
    | Absence / Time Off Balances                     | Absence balances tap              |
    | Leave of Absence                                | Worker leaves of absence tap      |
    | Time Off                                        | Time off details tap              |
    | Eligible Absence Types *(if listed separately)* | Worker eligible absence types tap |

    **Time Tracking**

    | Domain (search keywords)           | Used for               |
    | ---------------------------------- | ---------------------- |
    | Time Tracking / Worker Time Blocks | Worker time blocks tap |

    #### Step 4: Activate Security Changes

    1. Search: **Activate Pending Security Policy Changes**
    2. Review and submit

    Domain permission edits are not live until activated. Skipping this step is a common cause of `403 Forbidden` after credentials look correct.

    #### Step 5: Register API Client

    1. Search: **Register API Client for Integrations**
    2. Fill in:

    | Field                        | Value                                                                                 |
    | ---------------------------- | ------------------------------------------------------------------------------------- |
    | Client Name                  | `Parable Integration`                                                                 |
    | Client Grant Type            | **Client Credentials**                                                                |
    | Access Token Type            | **Bearer**                                                                            |
    | Integration System User      | The ISU from Step 1                                                                   |
    | Grant Administrative Consent | **Checked** *(recommended; grants tenant-wide consent for selected functional areas)* |

    3. On **Scope (Functional Areas)**, enable **all** of the following. Partial selection causes 403 errors when Parable calls payroll, absence, or time endpoints.

    | Functional area (Scope)                              | Parable data                                                                  |
    | ---------------------------------------------------- | ----------------------------------------------------------------------------- |
    | **Staffing**                                         | Workers, positions, job requisitions                                          |
    | **Organizations and Roles**                          | Organizations, supervisory organizations, org members, org chart              |
    | **Payroll**                                          | Payroll inputs, payment elections, worker pay slips                           |
    | **Absence Management** *(or **Time Off and Leave**)* | Absence balances, leaves of absence, eligible absence types, time off details |
    | **Time Tracking**                                    | Worker time blocks                                                            |

    > **Info:** Scope labels vary by tenant (for example **Time Off and Leave** instead of **Absence Management**). Some tenants also offer **Include Workday Owned Scope** for core domains outside standard functional areas; enable it only if Workday support recommends it for your tenant.

    > **Info:** Parable uses **client credentials only**. You do **not** need **Manage Refresh Tokens for Integrations** or a refresh token for this Provider.

    4. Submit the form and copy the **Client ID** and **Client Secret** immediately.

    > **Warning:** The Client Secret is shown only once. If you lose it, use **Generate New API Client Secret** on the client (this invalidates the old secret).

    #### Step 6: Confirm ISU Is Linked

    If the ISU was not set during registration:

    1. Search: **Edit API Client for Integrations**
    2. Open `Parable Integration`
    3. Set **Integration System User** to your ISU
    4. Confirm **Client Grant Type** is **Client Credentials**

    #### Step 7: Tenant URLs

    Workday REST and OAuth URLs use the **services** host, not the UI login host (`*.workday.com`).

    | Environment           | Example services host                                                         | Token endpoint                  |
    | --------------------- | ----------------------------------------------------------------------------- | ------------------------------- |
    | Sandbox (common)      | `https://wd5-impl-services1.workday.com`                                      | `.../ccx/oauth2/{tenant}/token` |
    | Sandbox (WD501-style) | `https://services1.wd501.myworkday.com`                                       | same path pattern               |
    | Production            | `https://{tenant}-services1.workday.com` or `https://services1.myworkday.com` | same path pattern               |

    Example workers probe:

    ```
    https://wd5-impl-services1.workday.com/ccx/api/staffing/v7/YOUR_TENANT/workers
    ```

    Replace `YOUR_TENANT` with your tenant name. Parable defaults to `https://{tenant}-services1.workday.com` when **Base URL** is blank. If the connection test returns `404 Not Found`, confirm the services host with your Workday administrator and enter it as **Base URL**.

    #### Step 8: Enter Values in Parable

    1. In Parable, open the **Workday** Provider (REST API, not RaaS)
    2. Enter **Tenant Name**, **Client ID**, and **Client Secret**
    3. Enter **Base URL** only if your services host differs from Parable's default
    4. Click **Save & test connection**

    Parable validates credentials by obtaining an OAuth token and calling `GET /workers?limit=1`. A successful test confirms authentication and Staffing API access. Sync runs across all Provider data once Workday functional areas and domain permissions above are in place.

    ```bash Get Access Token (Client Credentials) theme={null}
    curl -X POST "https://YOUR_SERVICES_HOST/ccx/oauth2/YOUR_TENANT/token" \
      -H "Content-Type: application/x-www-form-urlencoded" \
      -d "grant_type=client_credentials" \
      -d "client_id=YOUR_CLIENT_ID" \
      -d "client_secret=YOUR_CLIENT_SECRET"
    ```

    ```bash Test Staffing API Access theme={null}
    curl -H "Authorization: Bearer <ACCESS_TOKEN>" \
      "https://YOUR_SERVICES_HOST/ccx/api/staffing/v7/YOUR_TENANT/workers?limit=1"
    ```

    ```bash Test Payroll API Access theme={null}
    curl -H "Authorization: Bearer <ACCESS_TOKEN>" \
      "https://YOUR_SERVICES_HOST/ccx/api/payroll/v2/YOUR_TENANT/payrollInputs?limit=1"
    ```

    > **Success:** **Success!** If you received a `200 OK` response with valid data, your credentials are configured correctly. You can now configure this Provider in Parable.

    > **Tip:** **Rate Limits:** Workday enforces rate limits of **varies by tenant configuration; monitor X-RateLimit headers**.
    >
    > Parable handles rate limiting automatically with exponential backoff, but initial syncs of large datasets may take longer due to these limits.
  </Tab>

  <Tab title="Permissions">
    <AccordionGroup>
      <Accordion id="provider-permission-tap-workday-absence-balances-c68e368e1a1a" title="Absence Balances" icon="diagram-project" iconType="sharp-duotone-solid">
        Developer identifier: `absence_balances`

        **Absence Balances.** Extracts absence/accrual balance records for workers from the Workday Absence Management REST API. Returns balance data per worker per absence type. Supports filtering by worker ID and effective date. Paginated via offset/limit with a default page size of 20 and max of 100. Full sync only; no incremental field documented.

        * **Enables:** Reconcile provider-reported leave balances to workers and absence types at the requested effective date.
        * **Scope:** Reads the records selected by Workday's `/ccx/api/absenceManagement/v2/{tenantName}/balances` operation as a snapshot stream using full synchronization. This stream is opt-in. Visibility follows the Workday integration system user's domain and report permissions. Use is limited to authorized leave and workforce-availability administration; the records do not support health or performance inference. A later complete read can treat a previously seen record that is absent as removed.

        <AccordionGroup>
          <Accordion id="provider-permission-field-workday-absence-balances-descriptor-e6457a18f59d" title="Descriptor" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `absence_balances.descriptor`

            **Descriptor.** Human-readable descriptor for the balance record. It gives the absence balance a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `absence_balances.descriptor` for each absence balance; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each absence balance; it is not a stable identity. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.
          </Accordion>

          <Accordion id="provider-permission-field-workday-absence-balances-id-770c4b3f35b8" title="ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `absence_balances.id`

            **ID.** Workday unique identifier for the balance record. It provides the reference needed to connect the absence balance to the corresponding provider object.

            * **Enables:** Match repeated absence balance entries on ID in `absence_balances.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Workday reports ID as an identifier in its absence balance namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.
          </Accordion>

          <Accordion id="provider-permission-field-workday-absence-balances-worker-c081e3e0ecef" title="Worker" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `absence_balances.worker`

            **Worker.** Worker reference (ID/descriptor/href) this balance belongs to. It preserves the nested context needed to interpret the parent absence balance.

            * **Enables:** Attribute worker in `absence_balances.worker` to the parent absence balance; identify parent records where that nested worker object is absent.
            * **Interpretation:** Workday reports worker as a nested object on each absence balance; optional children may be absent from a valid response. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.
          </Accordion>

          <Accordion id="provider-permission-field-workday-absence-balances-worker-descriptor-8be0e80df497" title="Descriptor" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `absence_balances.worker.descriptor`

            **Descriptor.** Display name of the worker. It gives the worker a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `absence_balances.worker.descriptor` for each worker; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each worker; it is not a stable identity. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.
          </Accordion>

          <Accordion id="provider-permission-field-workday-absence-balances-worker-href-43a5f173c8f4" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `absence_balances.worker.href`

            **Href.** API URL to the worker resource. It locates the provider resource or path associated with the worker.

            * **Enables:** Associate each worker with the resource identified by href in `absence_balances.worker.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each worker; access still depends on viewer permissions and the URL may expire or change. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.
          </Accordion>

          <Accordion id="provider-permission-field-workday-absence-balances-worker-id-6159bc693f42" title="ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `absence_balances.worker.id`

            **ID.** Workday ID of the worker. It provides the reference needed to connect the absence balance to the corresponding provider object.

            * **Enables:** Connect each worker in Absence Balances to the referenced worker through `absence_balances.worker.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its worker namespace; it is not a universal identity outside Workday. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-workday-job-requisitions-f211b506e05f" title="Job Requisitions" icon="diagram-project" iconType="sharp-duotone-solid">
        Developer identifier: `job_requisitions`

        **Job Requisitions.** Extracts all job requisition records from the Workday Staffing REST API. Job requisitions represent approved requests to fill positions. Paginated via offset/limit. Full sync only.

        * **Enables:** Match each approved hiring request to its Workday requisition identity and descriptor for recruiting-record completeness.
        * **Scope:** Reads the records selected by Workday's `/ccx/api/staffing/v7/{tenantName}/jobRequisitions` operation as a snapshot stream using full synchronization. This stream is opt-in. Visibility follows the Workday integration system user's domain and report permissions. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. A later complete read can treat a previously seen record that is absent as removed.

        <AccordionGroup>
          <Accordion id="provider-permission-field-workday-job-requisitions-descriptor-aff85659c345" title="Descriptor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `job_requisitions.descriptor`

            **Descriptor.** Human-readable name/descriptor for the job requisition. It gives the job requisition a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `job_requisitions.descriptor` for each job requisition; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each job requisition; it is not a stable identity.
          </Accordion>

          <Accordion id="provider-permission-field-workday-job-requisitions-id-3975d679f89a" title="ID" icon="diagram-project" iconType="sharp-duotone-solid">
            Developer identifier: `job_requisitions.id`

            **ID.** Workday unique identifier for the job requisition. It provides the reference needed to connect the job requisition to the corresponding provider object.

            * **Enables:** Match repeated job requisition entries on ID in `job_requisitions.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Workday reports ID as an identifier in its job requisition namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-workday-org-chart-6f6e1c1b9dde" title="Org Chart" icon="diagram-project" iconType="sharp-duotone-solid">
        Developer identifier: `org_chart`

        **Org Chart.** Organization chart for a supervisory organization.

        * **Enables:** Reconstruct the organization-chart entries returned for each supervisory organization and retain their parent organization reference.
        * **Scope:** Reads the records selected by Workday's `/ccx/api/staffing/v7/{tenantName}/supervisoryOrganizations/{org_id}/orgChart` operation as a snapshot stream using full synchronization. This stream is opt-in. Visibility follows the Workday integration system user's domain and report permissions. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. A later complete read can treat a previously seen record that is absent as removed.

        <AccordionGroup>
          <Accordion id="provider-permission-field-workday-org-chart-descriptor-cb01da93f570" title="Descriptor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `org_chart.descriptor`

            **Descriptor.** The provider-reported descriptor for each org chart in Org Chart. It gives the org chart a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `org_chart.descriptor` for each org chart; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each org chart; it is not a stable identity.
          </Accordion>

          <Accordion id="provider-permission-field-workday-org-chart-id-336d191f65bb" title="ID" icon="diagram-project" iconType="sharp-duotone-solid">
            Developer identifier: `org_chart.id`

            **ID.** The provider-reported ID for each org chart in Org Chart. It provides the reference needed to connect the org chart to the corresponding provider object.

            * **Enables:** Match repeated org chart entries on ID in `org_chart.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Workday reports ID as an identifier in its org chart namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-workday-org-chart-org-id-26aec52a7f50" title="Org ID" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `org_chart.org_id`

            **Org ID.** Parent org reference copied into each org chart because the child operation does not return that relationship. It provides the reference needed to connect the org chart to the corresponding provider object.

            * **Enables:** Connect each org chart in Org Chart to the referenced org through `org_chart.org_id`; flag org ID values that do not resolve in that provider namespace.
            * **Interpretation:** Parable copies org ID from the parent traversal record into each org chart; the child Workday operation does not return it.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-workday-org-members-33d468e0aace" title="Org Members" icon="people-group" iconType="sharp-duotone-solid">
        Developer identifier: `org_members`

        **Org Members.** Members of a supervisory organization.

        * **Enables:** Match each supervisory organization to the worker-members returned by its child membership operation.
        * **Scope:** Reads the records selected by Workday's `/ccx/api/staffing/v7/{tenantName}/supervisoryOrganizations/{org_id}/members` operation as a snapshot stream using full synchronization. This stream is opt-in. Visibility follows the Workday integration system user's domain and report permissions. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. A later complete read can treat a previously seen record that is absent as removed.

        <AccordionGroup>
          <Accordion id="provider-permission-field-workday-org-members-descriptor-e2af70e4c7c3" title="Descriptor" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `org_members.descriptor`

            **Descriptor.** Preview of the job/membership instance. It gives the org member a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `org_members.descriptor` for each org member; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each org member; it is not a stable identity. This is provider-authored review context, not an independent Parable assessment of employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-org-members-id-7c1fa3cd4a0c" title="ID" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `org_members.id`

            **ID.** Job/position membership instance ID (not the worker ID). It provides the reference needed to connect the org member to the corresponding provider object.

            * **Enables:** Match repeated org member entries on ID in `org_members.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Workday reports ID as an identifier in its org member namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-workday-org-members-org-id-0bf7eaf5ca51" title="Org ID" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `org_members.org_id`

            **Org ID.** Parent org reference copied into each org member because the child operation does not return that relationship. It provides the reference needed to connect the org member to the corresponding provider object.

            * **Enables:** Connect each org member in Org Members to the referenced org through `org_members.org_id`; flag org ID values that do not resolve in that provider namespace.
            * **Interpretation:** Parable copies org ID from the parent traversal record into each org member; the child Workday operation does not return it.
          </Accordion>

          <Accordion id="provider-permission-field-workday-org-members-worker-fefb6936444f" title="Worker" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `org_members.worker`

            **Worker.** Worker filling this membership position. Foreign-key projection emits worker\_id (JobData.worker.ID) on the root table for identity AccountId. It preserves the nested context needed to interpret the parent org member.

            * **Enables:** Attribute worker in `org_members.worker` to the parent org member; identify parent records where that nested worker object is absent.
            * **Interpretation:** Workday reports worker as a nested object on each org member; optional children may be absent from a valid response. A connector directive maps this field to account identity.
          </Accordion>

          <Accordion id="provider-permission-field-workday-org-members-worker-descriptor-7e6ba06a7e5f" title="Descriptor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `org_members.worker.descriptor`

            **Descriptor.** Worker display name. It gives the org member worker ref a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `org_members.OrgMemberWorkerRef.descriptor` for each org member worker ref; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each org member worker ref; it is not a stable identity. A connector directive maps this field to a person's display name.
          </Accordion>

          <Accordion id="provider-permission-field-workday-org-members-worker-id-1766726cb3df" title="ID" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `org_members.worker.id`

            **ID.** Workday worker ID (WID). It provides the reference needed to connect the org member to the corresponding provider object.

            * **Enables:** Connect each org member worker ref in Org Members to the referenced org member worker ref through `org_members.OrgMemberWorkerRef.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its org member worker ref namespace; it is not a universal identity outside Workday.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-workday-organizations-74dd2f86e14b" title="Organizations" icon="diagram-project" iconType="sharp-duotone-solid">
        Developer identifier: `organizations`

        **Organizations.** Extracts all organization records from the Workday Staffing REST API. Organizations represent supervisory, cost center, company, and other org structures. Paginated via offset/limit. Full sync only.

        * **Enables:** Inventory Workday organization records and distinguish supervisory, cost-center, company, and other organization identities.
        * **Scope:** Reads the records selected by Workday's `/ccx/api/staffing/v7/{tenantName}/organizations` operation as a snapshot stream using full synchronization. Visibility follows the Workday integration system user's domain and report permissions. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. A later complete read can treat a previously seen record that is absent as removed.

        <AccordionGroup>
          <Accordion id="provider-permission-field-workday-organizations-descriptor-65c7c8eefe74" title="Descriptor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `organizations.descriptor`

            **Descriptor.** Human-readable name/descriptor for the organization. It gives the organization a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `organizations.descriptor` for each organization; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each organization; it is not a stable identity.
          </Accordion>

          <Accordion id="provider-permission-field-workday-organizations-id-208e4d5ee922" title="ID" icon="diagram-project" iconType="sharp-duotone-solid">
            Developer identifier: `organizations.id`

            **ID.** Workday unique identifier for the organization. It provides the reference needed to connect the organization to the corresponding provider object.

            * **Enables:** Match repeated organization entries on ID in `organizations.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Workday reports ID as an identifier in its organization namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-workday-payment-elections-0ddbdc20d186" title="Payment Elections" icon="money-check-dollar" iconType="sharp-duotone-solid">
        Developer identifier: `payment_elections`

        **Payment Elections.** Payment election rules from the Payroll API.

        * **Enables:** Confirm which provider-reported payment election record belongs to each worker.
        * **Scope:** Reads the records selected by Workday's `/ccx/api/payroll/v2/{tenantName}/paymentElections` operation as a snapshot stream using full synchronization. This stream is opt-in. Visibility follows the Workday integration system user's domain and report permissions. Use is limited to authorized workforce and payroll reconciliation; the records are not invoices and do not support performance inference. A later complete read can treat a previously seen record that is absent as removed.

        <AccordionGroup>
          <Accordion id="provider-permission-field-workday-payment-elections-descriptor-97dbd87c154f" title="Descriptor" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payment_elections.descriptor`

            **Descriptor.** The provider-reported descriptor for each payment election in Payment Elections. It gives the payment election a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `payment_elections.descriptor` for each payment election; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each payment election; it is not a stable identity. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payment-elections-id-28e718a45e42" title="ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payment_elections.id`

            **ID.** The provider-reported ID for each payment election in Payment Elections. It provides the reference needed to connect the payment election to the corresponding provider object.

            * **Enables:** Match repeated payment election entries on ID in `payment_elections.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Workday reports ID as an identifier in its payment election namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payment-elections-worker-812a4310bd87" title="Worker" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payment_elections.worker`

            **Worker.** The structured worker details attached to each payment election in Payment Elections. It preserves the nested context needed to interpret the parent payment election.

            * **Enables:** Attribute worker in `payment_elections.worker` to the parent payment election; identify parent records where that nested worker object is absent.
            * **Interpretation:** Workday reports worker as a nested object on each payment election; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-workday-payroll-inputs-ea3c8f24985e" title="Payroll Inputs" icon="money-check-dollar" iconType="sharp-duotone-solid">
        Developer identifier: `payroll_inputs`

        **Payroll Inputs.** Payroll input records from the Payroll API.

        * **Enables:** Reconcile payroll adjustments to the worker, pay component, pay period, currency, and effective dates.
        * **Scope:** Reads the records selected by Workday's `/ccx/api/payroll/v2/{tenantName}/payrollInputs` operation as an event stream using incremental synchronization. This stream is opt-in. Visibility follows the Workday integration system user's domain and report permissions. Use is limited to authorized workforce and payroll reconciliation; the records are not invoices and do not support performance inference. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-workday-payroll-inputs-additionaldata-89ca8d5067c9" title="Additional Data" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.additionalData`

            **Additional Data.** Additional custom data fields associated with the payroll input. It preserves the nested context needed to interpret the parent payroll input.

            * **Enables:** Compare the exact Workday-configured additional data set in `payroll_inputs.additionalData` for each payroll input; preserve provider labels and unknown entries.
            * **Interpretation:** Workday returns additional data as an array of additional data entry entries on each payroll input; missing, empty, and permission-redacted arrays are not equivalent. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-additionaldata-descriptor-34f703fc215a" title="Descriptor" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.additionalData.descriptor`

            **Descriptor.** Display name of the additional data field. It gives the additional data entry a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `payroll_inputs.AdditionalDataEntry.descriptor` for each additional data entry; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each additional data entry; it is not a stable identity. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-additionaldata-id-438c8e0e3d77" title="ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.additionalData.id`

            **ID.** Identifier for the additional data field. It provides the reference needed to connect the payroll input to the corresponding provider object.

            * **Enables:** Match repeated additional data entry entries on ID in `payroll_inputs.AdditionalDataEntry.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Workday reports ID as an identifier in its additional data entry namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-additionaldata-value-27bb53d01f93" title="Value" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.additionalData.value`

            **Value.** Value of the additional data field. It must be interpreted with the enclosing provider field name, type, or custom schema for the additional data entry.

            * **Enables:** Interpret `payroll_inputs.AdditionalDataEntry.value` with the enclosing custom field name, declared type, and provider schema; compare only records that share that contract.
            * **Interpretation:** Workday reports value under the enclosing custom or typed field contract on each additional data entry; compare it only with values from the same provider key and type. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-amount-65a4559e1011" title="Amount" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.amount`

            **Amount.** Monetary amount of the payroll input. It supplies the amount measure for the payroll input at the provider's declared unit and grain.

            * **Enables:** Reconcile amount in `payroll_inputs.amount` by pairing it with the same worker or position, currency, pay basis, and effective period.
            * **Interpretation:** Workday reports amount as a number at the parent record's grain on each payroll input; compare only records with the same unit and aggregation grain. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-comment-d268fcfe3db7" title="Comment" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.comment`

            **Comment.** Free-text comment or note associated with the payroll input. It defines the content surface available for this payroll input.

            * **Enables:** Locate payroll input records by comment in `payroll_inputs.comment`; attribute each text match to its parent payroll input and, when present, its reported author.
            * **Interpretation:** Workday supplies comment as text on each payroll input; referenced files or media are not implied unless explicitly represented. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-company-db3138057940" title="Company" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.company`

            **Company.** Reference to the company (legal entity) under which this payroll input is processed. It preserves the nested context needed to interpret the parent payroll input.

            * **Enables:** Attribute company in `payroll_inputs.company` to the parent payroll input; identify parent records where that nested company object is absent.
            * **Interpretation:** Workday reports company as a nested object on each payroll input; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-company-descriptor-7d40f52fcce8" title="Descriptor" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.company.descriptor`

            **Descriptor.** Display name of the company. It gives the company reference a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `payroll_inputs.CompanyReference.descriptor` for each company reference; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each company reference; it is not a stable identity. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-company-href-2ffef2ce91d0" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.company.href`

            **Href.** API URL to the company resource. It locates the provider resource or path associated with the company reference.

            * **Enables:** Associate each company reference with the resource identified by href in `payroll_inputs.CompanyReference.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each company reference; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-company-id-29e88811f700" title="ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.company.id`

            **ID.** Unique Workday ID of the company. It provides the reference needed to connect the payroll input to the corresponding provider object.

            * **Enables:** Connect each company reference in Payroll Inputs to the referenced company reference through `payroll_inputs.CompanyReference.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its company reference namespace; it is not a universal identity outside Workday. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-costcenter-02535d04aa6b" title="Cost Center" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.costCenter`

            **Cost Center.** Reference to the cost center for allocation of this payroll input. It preserves the nested context needed to interpret the parent payroll input.

            * **Enables:** Attribute cost center in `payroll_inputs.costCenter` to the parent payroll input; identify parent records where that nested cost center object is absent.
            * **Interpretation:** Workday reports cost center as a nested object on each payroll input; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-costcenter-descriptor-4b341ecc5e73" title="Descriptor" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.costCenter.descriptor`

            **Descriptor.** Display name of the cost center. It gives the cost center reference a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Reconcile descriptor in `payroll_inputs.CostCenterReference.descriptor` by pairing it with the same worker or position, currency, pay basis, and effective period.
            * **Interpretation:** Workday reports descriptor on each cost center reference; missing and empty values can have different meanings. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-costcenter-href-97b384856863" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.costCenter.href`

            **Href.** API URL to the cost center resource. It locates the provider resource or path associated with the cost center reference.

            * **Enables:** Associate each cost center reference with the resource identified by href in `payroll_inputs.CostCenterReference.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each cost center reference; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-costcenter-id-2f46feb8b84e" title="ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.costCenter.id`

            **ID.** Unique Workday ID of the cost center. It provides the reference needed to connect the payroll input to the corresponding provider object.

            * **Enables:** Connect each cost center reference in Payroll Inputs to the referenced cost center reference through `payroll_inputs.CostCenterReference.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its cost center reference namespace; it is not a universal identity outside Workday. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-createdby-45dc5bd8b00c" title="Created By" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.createdBy`

            **Created By.** Reference to the user who created the payroll input. It preserves the nested context needed to interpret the parent payroll input.

            * **Enables:** Attribute created by in `payroll_inputs.createdBy` to the parent payroll input; identify parent records where that nested created by object is absent.
            * **Interpretation:** Workday reports created by as a nested object on each payroll input; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-createdby-descriptor-d7f220577a78" title="Descriptor" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.createdBy.descriptor`

            **Descriptor.** Display name or descriptor of the worker. It gives the worker reference a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `payroll_inputs.WorkerReference.descriptor` for each worker reference; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each worker reference; it is not a stable identity. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-createdby-href-d4f3bc971f6b" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.createdBy.href`

            **Href.** API URL to the worker resource. It locates the provider resource or path associated with the worker reference.

            * **Enables:** Associate each worker reference with the resource identified by href in `payroll_inputs.WorkerReference.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each worker reference; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-createdby-id-0a355646b809" title="ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.createdBy.id`

            **ID.** Unique Workday ID of the worker. It provides the reference needed to connect the payroll input to the corresponding provider object.

            * **Enables:** Connect each worker reference in Payroll Inputs to the referenced worker reference through `payroll_inputs.WorkerReference.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its worker reference namespace; it is not a universal identity outside Workday. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-createdon-69ff7b00bbba" title="Created On" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.createdOn`

            **Created On.** Timestamp when the payroll input was created. It anchors the payroll input on the provider's reported timeline.

            * **Enables:** Order Payroll Inputs by created on in `payroll_inputs.createdOn` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Workday reports created on as a timestamp on each payroll input; timezone and precision follow this API field, and absence is not an inferred event time. The schema designates this field as the event timestamp. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-currency-120ad6a8a72f" title="Currency" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.currency`

            **Currency.** Currency in which the payroll input amount is denominated. It preserves the nested context needed to interpret the parent payroll input.

            * **Enables:** Attribute currency in `payroll_inputs.currency` to the parent payroll input; identify parent records where that nested currency object is absent.
            * **Interpretation:** Workday reports currency as a nested object on each payroll input; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-currency-descriptor-68dfdd2f53bc" title="Descriptor" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.currency.descriptor`

            **Descriptor.** Display name of the currency (e.g., US Dollar). It gives the currency reference a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Reconcile descriptor in `payroll_inputs.CurrencyReference.descriptor` by pairing it with the same worker or position, currency, pay basis, and effective period.
            * **Interpretation:** Workday reports descriptor on each currency reference; missing and empty values can have different meanings. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-currency-href-fec6db91faf0" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.currency.href`

            **Href.** API URL to the currency resource. It locates the provider resource or path associated with the currency reference.

            * **Enables:** Associate each currency reference with the resource identified by href in `payroll_inputs.CurrencyReference.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each currency reference; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-currency-id-53d6526cb3f6" title="ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.currency.id`

            **ID.** ISO 4217 currency code or Workday currency ID. It provides the reference needed to connect the payroll input to the corresponding provider object.

            * **Enables:** Connect each currency reference in Payroll Inputs to the referenced currency reference through `payroll_inputs.CurrencyReference.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its currency reference namespace; it is not a universal identity outside Workday. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-deductioncode-c8f81482434d" title="Deduction Code" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.deductionCode`

            **Deduction Code.** Reference to the deduction code, if this payroll input is a deduction. It preserves the nested context needed to interpret the parent payroll input.

            * **Enables:** Attribute deduction code in `payroll_inputs.deductionCode` to the parent payroll input; identify parent records where that nested deduction code object is absent.
            * **Interpretation:** Workday reports deduction code as a nested object on each payroll input; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-deductioncode-descriptor-f1d289ec4cf1" title="Descriptor" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.deductionCode.descriptor`

            **Descriptor.** Display name of the deduction code. It gives the deduction code reference a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `payroll_inputs.DeductionCodeReference.descriptor` for each deduction code reference; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each deduction code reference; it is not a stable identity. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-deductioncode-href-59f7fbd34e32" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.deductionCode.href`

            **Href.** API URL to the deduction code resource. It locates the provider resource or path associated with the deduction code reference.

            * **Enables:** Associate each deduction code reference with the resource identified by href in `payroll_inputs.DeductionCodeReference.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each deduction code reference; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-deductioncode-id-fa794c9f6745" title="ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.deductionCode.id`

            **ID.** Unique Workday ID of the deduction code. It provides the reference needed to connect the payroll input to the corresponding provider object.

            * **Enables:** Connect each deduction code reference in Payroll Inputs to the referenced deduction code reference through `payroll_inputs.DeductionCodeReference.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its deduction code reference namespace; it is not a universal identity outside Workday. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-descriptor-e1d29db025fe" title="Descriptor" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.descriptor`

            **Descriptor.** Human-readable description of the payroll input, identifying the type of payroll adjustment. It supplies the returned descriptor text needed to understand the payroll input in context.

            * **Enables:** Reconcile descriptor in `payroll_inputs.descriptor` by pairing it with the same worker or position, currency, pay basis, and effective period.
            * **Interpretation:** Workday reports descriptor on each payroll input; missing and empty values can have different meanings. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-earningcode-7402db3669f4" title="Earning Code" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.earningCode`

            **Earning Code.** Reference to the earning code, if this payroll input is an earning. It preserves the nested context needed to interpret the parent payroll input.

            * **Enables:** Attribute earning code in `payroll_inputs.earningCode` to the parent payroll input; identify parent records where that nested earning code object is absent.
            * **Interpretation:** Workday reports earning code as a nested object on each payroll input; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-earningcode-descriptor-ed78788d8bd3" title="Descriptor" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.earningCode.descriptor`

            **Descriptor.** Display name of the earning code. It gives the earning code reference a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `payroll_inputs.EarningCodeReference.descriptor` for each earning code reference; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each earning code reference; it is not a stable identity. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-earningcode-href-5239d0557d22" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.earningCode.href`

            **Href.** API URL to the earning code resource. It locates the provider resource or path associated with the earning code reference.

            * **Enables:** Associate each earning code reference with the resource identified by href in `payroll_inputs.EarningCodeReference.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each earning code reference; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-earningcode-id-ab98bc744621" title="ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.earningCode.id`

            **ID.** Unique Workday ID of the earning code. It provides the reference needed to connect the payroll input to the corresponding provider object.

            * **Enables:** Connect each earning code reference in Payroll Inputs to the referenced earning code reference through `payroll_inputs.EarningCodeReference.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its earning code reference namespace; it is not a universal identity outside Workday. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-enddate-f056f885f83d" title="End Date" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.endDate`

            **End Date.** End date for the payroll input effective period. It anchors the payroll input on the provider's reported timeline.

            * **Enables:** Filter Payroll Inputs by end date in `payroll_inputs.endDate`; pair that boundary with the corresponding start before measuring elapsed time.
            * **Interpretation:** Workday reports end date as a calendar date on each payroll input; its grain is one day and no time of day should be inferred. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-frequencybehavior-527f4375ad14" title="Frequency Behavior" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.frequencyBehavior`

            **Frequency Behavior.** Frequency behavior indicating how the input recurs across pay periods. It distinguishes the provider-defined frequency behavior state or classification for the payroll input.

            * **Enables:** Reconcile frequency behavior in `payroll_inputs.frequencyBehavior` by pairing it with the same worker or position, currency, pay basis, and effective period.
            * **Interpretation:** Workday reports frequency behavior as a label from its own taxonomy on each payroll input; preserve unknown labels rather than mapping them by assumption. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-hours-d4805d74fa09" title="Hours" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.hours`

            **Hours.** Number of hours associated with the payroll input, if applicable. It supplies the hours measure for the payroll input at the provider's declared unit and grain.

            * **Enables:** Reconcile hours in `payroll_inputs.hours` by pairing it with the same worker or position, currency, pay basis, and effective period.
            * **Interpretation:** Workday reports hours as hours on each payroll input; compare only records with the same unit and aggregation grain. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-href-78b6c11fbb3f" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.href`

            **Href.** API URL to the full payroll input resource. It locates the provider resource or path associated with the payroll input.

            * **Enables:** Associate each payroll input with the resource identified by href in `payroll_inputs.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each payroll input; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-id-723b4026ed92" title="ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.id`

            **ID.** Unique identifier for the payroll input record. It provides the reference needed to connect the payroll input to the corresponding provider object.

            * **Enables:** Match repeated payroll input entries on ID in `payroll_inputs.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Workday reports ID as an identifier in its payroll input namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-inputstatus-68554df619c9" title="Input Status" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.inputStatus`

            **Input Status.** Current processing status of the payroll input. It distinguishes the provider-defined input status state or classification for the payroll input.

            * **Enables:** Reconcile input status in `payroll_inputs.inputStatus` by pairing it with the same worker or position, currency, pay basis, and effective period.
            * **Interpretation:** Workday reports input status as a label from its own taxonomy on each payroll input; preserve unknown labels rather than mapping them by assumption. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-lastupdated-6a74f5080e82" title="Last Updated" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.lastUpdated`

            **Last Updated.** Timestamp when the payroll input was last modified. It anchors the payroll input on the provider's reported timeline.

            * **Enables:** Order Payroll Inputs by last updated in `payroll_inputs.lastUpdated` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Workday reports last updated as a timestamp on each payroll input; timezone and precision follow this API field, and absence is not an inferred event time. A connector directive uses this field to order records for latest-state or incremental processing. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-paycomponent-42ddc4964077" title="Pay Component" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.payComponent`

            **Pay Component.** Reference to the pay component (earning, deduction, or other pay element) for this input. It preserves the nested context needed to interpret the parent payroll input.

            * **Enables:** Attribute pay component in `payroll_inputs.payComponent` to the parent payroll input; identify parent records where that nested pay component object is absent.
            * **Interpretation:** Workday reports pay component as a nested object on each payroll input; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-paycomponent-category-a19e85ac6bfb" title="Category" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.payComponent.category`

            **Category.** Category of the pay component (e.g., earning, deduction, tax). It identifies the related provider object that gives the pay component reference its parent, owner, or container context.

            * **Enables:** Reconcile category in `payroll_inputs.PayComponentReference.category` by pairing it with the same worker or position, currency, pay basis, and effective period.
            * **Interpretation:** Workday reports category as a label from its own taxonomy on each pay component reference; preserve unknown labels rather than mapping them by assumption. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-paycomponent-descriptor-5985b1229f36" title="Descriptor" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.payComponent.descriptor`

            **Descriptor.** Display name of the pay component. It gives the pay component reference a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Reconcile descriptor in `payroll_inputs.PayComponentReference.descriptor` by pairing it with the same worker or position, currency, pay basis, and effective period.
            * **Interpretation:** Workday reports descriptor on each pay component reference; missing and empty values can have different meanings. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-paycomponent-href-5c0ecc84cf36" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.payComponent.href`

            **Href.** API URL to the pay component resource. It locates the provider resource or path associated with the pay component reference.

            * **Enables:** Associate each pay component reference with the resource identified by href in `payroll_inputs.PayComponentReference.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each pay component reference; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-paycomponent-id-15aa36b535a8" title="ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.payComponent.id`

            **ID.** Unique Workday ID of the pay component. It provides the reference needed to connect the payroll input to the corresponding provider object.

            * **Enables:** Connect each pay component reference in Payroll Inputs to the referenced pay component reference through `payroll_inputs.PayComponentReference.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its pay component reference namespace; it is not a universal identity outside Workday. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-payperiod-4e96e191ddbf" title="Pay Period" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.payPeriod`

            **Pay Period.** Reference to the specific pay period this input applies to. It preserves the nested context needed to interpret the parent payroll input.

            * **Enables:** Attribute pay period in `payroll_inputs.payPeriod` to the parent payroll input; identify parent records where that nested pay period object is absent.
            * **Interpretation:** Workday reports pay period as a nested object on each payroll input; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-payperiod-descriptor-436cdafaaad5" title="Descriptor" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.payPeriod.descriptor`

            **Descriptor.** Display name of the pay period. It gives the pay period reference a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Reconcile descriptor in `payroll_inputs.PayPeriodReference.descriptor` by pairing it with the same worker or position, currency, pay basis, and effective period.
            * **Interpretation:** Workday reports descriptor on each pay period reference; missing and empty values can have different meanings. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-payperiod-enddate-a43fcc060e18" title="End Date" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.payPeriod.endDate`

            **End Date.** End date of the pay period. It anchors the payroll input on the provider's reported timeline.

            * **Enables:** Filter Payroll Inputs by end date in `payroll_inputs.PayPeriodReference.endDate`; pair that boundary with the corresponding start before measuring elapsed time.
            * **Interpretation:** Workday reports end date as a calendar date on each pay period reference; its grain is one day and no time of day should be inferred. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-payperiod-href-f0638122fead" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.payPeriod.href`

            **Href.** API URL to the pay period resource. It locates the provider resource or path associated with the pay period reference.

            * **Enables:** Associate each pay period reference with the resource identified by href in `payroll_inputs.PayPeriodReference.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each pay period reference; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-payperiod-id-d86fb0b3110d" title="ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.payPeriod.id`

            **ID.** Unique Workday ID of the pay period. It provides the reference needed to connect the payroll input to the corresponding provider object.

            * **Enables:** Connect each pay period reference in Payroll Inputs to the referenced pay period reference through `payroll_inputs.PayPeriodReference.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its pay period reference namespace; it is not a universal identity outside Workday. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-payperiod-startdate-a69fa097c6c7" title="Start Date" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.payPeriod.startDate`

            **Start Date.** Start date of the pay period. It anchors the payroll input on the provider's reported timeline.

            * **Enables:** Filter Payroll Inputs by start date in `payroll_inputs.PayPeriodReference.startDate`; pair that boundary with the corresponding end before measuring elapsed time.
            * **Interpretation:** Workday reports start date as a calendar date on each pay period reference; its grain is one day and no time of day should be inferred. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-payrollinputtype-b004e76aaf6a" title="Payroll Input Type" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.payrollInputType`

            **Payroll Input Type.** Type classification of the payroll input (one-time vs recurring). It distinguishes the provider-defined payroll input type state or classification for the payroll input.

            * **Enables:** Reconcile payroll input type in `payroll_inputs.payrollInputType` by pairing it with the same worker or position, currency, pay basis, and effective period.
            * **Interpretation:** Workday reports payroll input type as a label from its own taxonomy on each payroll input; preserve unknown labels rather than mapping them by assumption. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-percentage-bbb0d8a5beb8" title="Percentage" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.percentage`

            **Percentage.** Percentage value if the payroll input is percentage-based. It supplies the percentage measure for the payroll input at the provider's declared unit and grain.

            * **Enables:** Reconcile percentage in `payroll_inputs.percentage` by pairing it with the same worker or position, currency, pay basis, and effective period.
            * **Interpretation:** Workday reports percentage as the provider's percentage scale on each payroll input; compare only records with the same unit and aggregation grain. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-position-bb81353a7d53" title="Position" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.position`

            **Position.** Reference to the position associated with this payroll input. It preserves the nested context needed to interpret the parent payroll input.

            * **Enables:** Attribute position in `payroll_inputs.position` to the parent payroll input; identify parent records where that nested position object is absent.
            * **Interpretation:** Workday reports position as a nested object on each payroll input; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-position-descriptor-380f37254ade" title="Descriptor" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.position.descriptor`

            **Descriptor.** Display name of the position. It gives the position reference a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `payroll_inputs.PositionReference.descriptor` for each position reference; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each position reference; it is not a stable identity. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-position-href-61c7155cb89d" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.position.href`

            **Href.** API URL to the position resource. It locates the provider resource or path associated with the position reference.

            * **Enables:** Associate each position reference with the resource identified by href in `payroll_inputs.PositionReference.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each position reference; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-position-id-1381507ab509" title="ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.position.id`

            **ID.** Unique Workday ID of the position. It provides the reference needed to connect the payroll input to the corresponding provider object.

            * **Enables:** Connect each position reference in Payroll Inputs to the referenced position reference through `payroll_inputs.PositionReference.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its position reference namespace; it is not a universal identity outside Workday. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-rate-023575f10b88" title="Rate" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.rate`

            **Rate.** Rate value for the payroll input (e.g., hourly rate override). It supplies the rate measure for the payroll input at the provider's declared unit and grain.

            * **Enables:** Reconcile rate in `payroll_inputs.rate` by pairing it with the same worker or position, currency, pay basis, and effective period.
            * **Interpretation:** Workday reports rate as a number at the parent record's grain on each payroll input; compare only records with the same unit and aggregation grain. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-startdate-704c9922352c" title="Start Date" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.startDate`

            **Start Date.** Start date for the payroll input effective period. It anchors the payroll input on the provider's reported timeline.

            * **Enables:** Filter Payroll Inputs by start date in `payroll_inputs.startDate`; pair that boundary with the corresponding end before measuring elapsed time.
            * **Interpretation:** Workday reports start date as a calendar date on each payroll input; its grain is one day and no time of day should be inferred. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-taxcode-f5a1db0ad122" title="Tax Code" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.taxCode`

            **Tax Code.** Reference to the tax code, if this payroll input is a tax override. It preserves the nested context needed to interpret the parent payroll input.

            * **Enables:** Attribute tax code in `payroll_inputs.taxCode` to the parent payroll input; identify parent records where that nested tax code object is absent.
            * **Interpretation:** Workday reports tax code as a nested object on each payroll input; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-taxcode-descriptor-65040f0528a0" title="Descriptor" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.taxCode.descriptor`

            **Descriptor.** Display name of the tax code. It gives the tax code reference a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `payroll_inputs.TaxCodeReference.descriptor` for each tax code reference; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each tax code reference; it is not a stable identity. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-taxcode-href-6ada8080c3e8" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.taxCode.href`

            **Href.** API URL to the tax code resource. It locates the provider resource or path associated with the tax code reference.

            * **Enables:** Associate each tax code reference with the resource identified by href in `payroll_inputs.TaxCodeReference.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each tax code reference; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-taxcode-id-4f078725a645" title="ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.taxCode.id`

            **ID.** Unique Workday ID of the tax code. It provides the reference needed to connect the payroll input to the corresponding provider object.

            * **Enables:** Connect each tax code reference in Payroll Inputs to the referenced tax code reference through `payroll_inputs.TaxCodeReference.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its tax code reference namespace; it is not a universal identity outside Workday. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-units-9bf60ad90bed" title="Units" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.units`

            **Units.** Number of units for the payroll input, if applicable. It supplies the units boundary, band, or unit needed to interpret the companion measure.

            * **Enables:** Reconcile units in `payroll_inputs.units` by pairing it with the same worker or position, currency, pay basis, and effective period.
            * **Interpretation:** Workday reports units as a count at the parent record's grain on each payroll input; compare only records with the same unit and aggregation grain. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-worker-8897972713f8" title="Worker" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.worker`

            **Worker.** Reference to the worker associated with this payroll input. It preserves the nested context needed to interpret the parent payroll input.

            * **Enables:** Attribute worker in `payroll_inputs.worker` to the parent payroll input; identify parent records where that nested worker object is absent.
            * **Interpretation:** Workday reports worker as a nested object on each payroll input; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-worktag-4f57de87ff19" title="Worktag" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.worktag`

            **Worktag.** Worktags associated with this payroll input for cost allocation and reporting. It preserves the nested context needed to interpret the parent payroll input.

            * **Enables:** Compare the exact Workday-configured worktag set in `payroll_inputs.worktag` for each payroll input; preserve provider labels and unknown entries.
            * **Interpretation:** Workday returns worktag as an array of worktag reference entries on each payroll input; missing, empty, and permission-redacted arrays are not equivalent. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-worktag-descriptor-4ce44c66aeff" title="Descriptor" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.worktag.descriptor`

            **Descriptor.** Display name of the worktag. It gives the worktag reference a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `payroll_inputs.WorktagReference.descriptor` for each worktag reference; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each worktag reference; it is not a stable identity. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-worktag-href-80b75aff24b7" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.worktag.href`

            **Href.** API URL to the worktag resource. It locates the provider resource or path associated with the worktag reference.

            * **Enables:** Associate each worktag reference with the resource identified by href in `payroll_inputs.WorktagReference.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each worktag reference; access still depends on viewer permissions and the URL may expire or change. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-payroll-inputs-worktag-id-4448de39de3f" title="ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `payroll_inputs.worktag.id`

            **ID.** Unique Workday ID of the worktag. It provides the reference needed to connect the payroll input to the corresponding provider object.

            * **Enables:** Match repeated worktag reference entries on ID in `payroll_inputs.WorktagReference.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Workday reports ID as an identifier in its worktag reference namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-workday-positions-5afd7213721c" title="Positions" icon="diagram-project" iconType="sharp-duotone-solid">
        Developer identifier: `positions`

        **Positions.** Extracts all position records (open and filled) from the Workday Staffing REST API. Positions represent authorized headcount slots within the organization. Paginated via offset/limit. Full sync only.

        * **Enables:** Reconcile open and filled headcount positions to their Workday identity and descriptor for workforce planning.
        * **Scope:** Reads the records selected by Workday's `/ccx/api/staffing/v7/{tenantName}/positions` operation as a snapshot stream using full synchronization. This stream is opt-in. Visibility follows the Workday integration system user's domain and report permissions. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. A later complete read can treat a previously seen record that is absent as removed.

        <AccordionGroup>
          <Accordion id="provider-permission-field-workday-positions-descriptor-5839337cb8f8" title="Descriptor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `positions.descriptor`

            **Descriptor.** Human-readable name/descriptor for the position. It gives the position a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `positions.descriptor` for each position; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each position; it is not a stable identity.
          </Accordion>

          <Accordion id="provider-permission-field-workday-positions-id-ad62ef575f5d" title="ID" icon="diagram-project" iconType="sharp-duotone-solid">
            Developer identifier: `positions.id`

            **ID.** Workday unique identifier for the position. It provides the reference needed to connect the position to the corresponding provider object.

            * **Enables:** Match repeated position entries on ID in `positions.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Workday reports ID as an identifier in its position namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-workday-supervisory-organizations-ba628a8579ed" title="Supervisory Organizations" icon="diagram-project" iconType="sharp-duotone-solid">
        Developer identifier: `supervisory_organizations`

        **Supervisory Organizations.** Supervisory organization hierarchy from the Staffing API.

        * **Enables:** Reconstruct supervisory organization hierarchy and connect each organization to its manager and parent references.
        * **Scope:** Reads the records selected by Workday's `/ccx/api/staffing/v7/{tenantName}/supervisoryOrganizations` operation as a snapshot stream using full synchronization. Visibility follows the Workday integration system user's domain and report permissions. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. A later complete read can treat a previously seen record that is absent as removed.

        <AccordionGroup>
          <Accordion id="provider-permission-field-workday-supervisory-organizations-descriptor-8fabec98d177" title="Descriptor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `supervisory_organizations.descriptor`

            **Descriptor.** Display name of the supervisory organization. It gives the supervisory organization a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `supervisory_organizations.descriptor` for each supervisory organization; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each supervisory organization; it is not a stable identity.
          </Accordion>

          <Accordion id="provider-permission-field-workday-supervisory-organizations-id-43c618b4c4a4" title="ID" icon="diagram-project" iconType="sharp-duotone-solid">
            Developer identifier: `supervisory_organizations.id`

            **ID.** Unique Workday ID for the supervisory organization. It provides the reference needed to connect the supervisory organization to the corresponding provider object.

            * **Enables:** Match repeated supervisory organization entries on ID in `supervisory_organizations.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Workday reports ID as an identifier in its supervisory organization namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-workday-supervisory-organizations-manager-95ca2c90ceca" title="Manager" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `supervisory_organizations.manager`

            **Manager.** Manager reference for this supervisory organization (ID/descriptor/href). It preserves the nested context needed to interpret the parent supervisory organization.

            * **Enables:** Attribute manager in `supervisory_organizations.manager` to the parent supervisory organization; identify parent records where that nested manager object is absent.
            * **Interpretation:** Workday reports manager as a nested object on each supervisory organization; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-workday-supervisory-organizations-manager-descri-65c283d0e25a" title="Descriptor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `supervisory_organizations.manager.descriptor`

            **Descriptor.** Display name of the manager. It gives the manager a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `supervisory_organizations.manager.descriptor` for each manager; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each manager; it is not a stable identity.
          </Accordion>

          <Accordion id="provider-permission-field-workday-supervisory-organizations-manager-href-95453c937c7a" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `supervisory_organizations.manager.href`

            **Href.** API URL to the manager worker resource. It locates the provider resource or path associated with the manager.

            * **Enables:** Associate each manager with the resource identified by href in `supervisory_organizations.manager.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each manager; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-workday-supervisory-organizations-manager-id-7af49a94e10e" title="ID" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `supervisory_organizations.manager.id`

            **ID.** Workday ID of the manager worker. It provides the reference needed to connect the supervisory organization to the corresponding provider object.

            * **Enables:** Connect each manager in Supervisory Organizations to the referenced manager through `supervisory_organizations.manager.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its manager namespace; it is not a universal identity outside Workday.
          </Accordion>

          <Accordion id="provider-permission-field-workday-supervisory-organizations-superior-1e13d282dcdb" title="Superior" icon="diagram-project" iconType="sharp-duotone-solid">
            Developer identifier: `supervisory_organizations.superior`

            **Superior.** Parent supervisory organization reference (public Staffing docs use superior). It preserves the nested context needed to interpret the parent supervisory organization.

            * **Enables:** Attribute superior in `supervisory_organizations.superior` to the parent supervisory organization; identify parent records where that nested superior object is absent.
            * **Interpretation:** Workday reports superior as a nested object on each supervisory organization; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-workday-supervisory-organizations-superior-descr-0394a1c7ca99" title="Descriptor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `supervisory_organizations.superior.descriptor`

            **Descriptor.** Display name of the superior organization. It gives the superior a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `supervisory_organizations.superior.descriptor` for each superior; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each superior; it is not a stable identity.
          </Accordion>

          <Accordion id="provider-permission-field-workday-supervisory-organizations-superior-href-8196d3d16684" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `supervisory_organizations.superior.href`

            **Href.** API URL to the superior organization resource. It locates the provider resource or path associated with the superior.

            * **Enables:** Associate each superior with the resource identified by href in `supervisory_organizations.superior.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each superior; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-workday-supervisory-organizations-superior-id-1ce938f0448a" title="ID" icon="diagram-project" iconType="sharp-duotone-solid">
            Developer identifier: `supervisory_organizations.superior.id`

            **ID.** Workday ID of the superior organization. It provides the reference needed to connect the supervisory organization to the corresponding provider object.

            * **Enables:** Connect each superior in Supervisory Organizations to the referenced superior through `supervisory_organizations.superior.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its superior namespace; it is not a universal identity outside Workday.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-workday-time-off-details-792ce80bae0b" title="Time Off Details" icon="calendar-clock" iconType="sharp-duotone-solid">
        Developer identifier: `time_off_details`

        **Time Off Details.** Time off detail records per worker from the Absence Management API.

        * **Enables:** Match time-off details to workers and effective records for leave administration.
        * **Scope:** Reads the records selected by Workday's `/ccx/api/absenceManagement/v2/{tenantName}/workers/{worker_id}/timeOffDetails` operation as an event stream using incremental synchronization. This stream is opt-in. Visibility follows the Workday integration system user's domain and report permissions. Use is limited to authorized leave and workforce-availability administration; the records do not support health or performance inference. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-workday-time-off-details-descriptor-749b81961c40" title="Descriptor" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `time_off_details.descriptor`

            **Descriptor.** The provider-reported descriptor for each time off detail in Time Off Details. It gives the time off detail a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `time_off_details.descriptor` for each time off detail; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each time off detail; it is not a stable identity. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.
          </Accordion>

          <Accordion id="provider-permission-field-workday-time-off-details-id-ee37a4a48275" title="ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `time_off_details.id`

            **ID.** The provider-reported ID for each time off detail in Time Off Details. It provides the reference needed to connect the time off detail to the corresponding provider object.

            * **Enables:** Match repeated time off detail entries on ID in `time_off_details.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Workday reports ID as an identifier in its time off detail namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.
          </Accordion>

          <Accordion id="provider-permission-field-workday-time-off-details-worker-678976219f46" title="Worker" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `time_off_details.worker`

            **Worker.** The structured worker details attached to each time off detail in Time Off Details. It preserves the nested context needed to interpret the parent time off detail.

            * **Enables:** Attribute worker in `time_off_details.worker` to the parent time off detail; identify parent records where that nested worker object is absent.
            * **Interpretation:** Workday reports worker as a nested object on each time off detail; optional children may be absent from a valid response. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.
          </Accordion>

          <Accordion id="provider-permission-field-workday-time-off-details-worker-id-f0a7880562db" title="Worker ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `time_off_details.worker_id`

            **Worker ID.** Parent worker reference copied into each time off detail because the child operation does not return that relationship. It provides the reference needed to connect the time off detail to the corresponding provider object.

            * **Enables:** Connect each time off detail in Time Off Details to the referenced worker through `time_off_details.worker_id`; flag worker ID values that do not resolve in that provider namespace.
            * **Interpretation:** Parable copies worker ID from the parent traversal record into each time off detail; the child Workday operation does not return it. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-workday-worker-eligible-absence-types-a4b7824a63b8" title="Worker Eligible Absence Types" icon="people-group" iconType="sharp-duotone-solid">
        Developer identifier: `worker_eligible_absence_types`

        **Worker Eligible Absence Types.** Extracts the absence/leave types that each worker is eligible for, from the Workday Absence Management REST API. This is a child endpoint traversed per worker. Useful for understanding leave entitlements and work taxonomy. One call per worker ID.

        * **Enables:** Confirm which provider-defined leave types Workday reports as eligible for each worker.
        * **Scope:** Reads the records selected by Workday's `/ccx/api/absenceManagement/v2/{tenantName}/workers/{worker_id}/eligibleAbsenceTypes` operation as a snapshot stream using full synchronization. This stream is opt-in. Visibility follows the Workday integration system user's domain and report permissions. Use is limited to authorized leave and workforce-availability administration; the records do not support health or performance inference. A later complete read can treat a previously seen record that is absent as removed.

        <AccordionGroup>
          <Accordion id="provider-permission-field-workday-worker-eligible-absence-types-descriptor-7e3b63b11140" title="Descriptor" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `worker_eligible_absence_types.descriptor`

            **Descriptor.** Human-readable name/descriptor for the eligible absence type. It gives the worker eligible absence type a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Match descriptor in `worker_eligible_absence_types.descriptor` to the relevant worker, leave type, unit, and effective date for authorized leave administration.
            * **Interpretation:** Workday reports descriptor on each worker eligible absence type; missing and empty values can have different meanings. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.
          </Accordion>

          <Accordion id="provider-permission-field-workday-worker-eligible-absence-types-id-ffa2113e6d9d" title="ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `worker_eligible_absence_types.id`

            **ID.** Workday unique identifier for the eligible absence type. It provides the reference needed to connect the worker eligible absence type to the corresponding provider object.

            * **Enables:** Match repeated worker eligible absence type entries on ID in `worker_eligible_absence_types.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Workday reports ID as an identifier in its worker eligible absence type namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.
          </Accordion>

          <Accordion id="provider-permission-field-workday-worker-eligible-absence-types-worker-id-48ca995032a3" title="Worker ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `worker_eligible_absence_types.worker_id`

            **Worker ID.** Parent worker reference copied into each worker eligible absence type because the child operation does not return that relationship. It provides the reference needed to connect the worker eligible absence type to the corresponding provider object.

            * **Enables:** Connect each worker eligible absence type in Worker Eligible Absence Types to the referenced worker through `worker_eligible_absence_types.worker_id`; flag worker ID values that do not resolve in that provider namespace.
            * **Interpretation:** Parable copies worker ID from the parent traversal record into each worker eligible absence type; the child Workday operation does not return it. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-workday-worker-leaves-of-absence-9cc11760dabf" title="Worker Leaves Of Absence" icon="people-group" iconType="sharp-duotone-solid">
        Developer identifier: `worker_leaves_of_absence`

        **Worker Leaves Of Absence.** Extracts leave-of-absence records for each worker from the Workday Absence Management REST API. This is a child endpoint traversed per worker. Returns leave records with fields including effectiveDate, dateOfFirstAbsence, stopPaymentDate, singleParentIndicator, multipleChildIndicator, and childsDateOfDeath. Traversal is required: one call per worker ID obtained from the workers tap.

        * **Enables:** Match leave records to workers and effective dates for narrow workforce-availability reconciliation.
        * **Scope:** Reads the records selected by Workday's `/ccx/api/absenceManagement/v2/{tenantName}/workers/{worker_id}/leavesOfAbsence` operation as a snapshot stream using full synchronization. This stream is opt-in. Visibility follows the Workday integration system user's domain and report permissions. Use is limited to authorized leave and workforce-availability administration; the records do not support health or performance inference. A later complete read can treat a previously seen record that is absent as removed.

        <AccordionGroup>
          <Accordion id="provider-permission-field-workday-worker-leaves-of-absence-childsdateofdea-cc80f3eb15b7" title="Childs Date Of Death" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `worker_leaves_of_absence.childsDateOfDeath`

            **Childs Date Of Death.** Date of death of a child, if applicable to the leave reason. It anchors the worker leave-of-absence records on the provider's reported timeline.

            * **Enables:** Match childs date of death in `worker_leaves_of_absence.childsDateOfDeath` to the relevant worker, leave type, unit, and effective date for authorized leave administration.
            * **Interpretation:** Workday reports childs date of death as a calendar date on each worker leave-of-absence records; its grain is one day and no time of day should be inferred. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.
          </Accordion>

          <Accordion id="provider-permission-field-workday-worker-leaves-of-absence-dateoffirstabse-3db9af29ceda" title="Date Of First Absence" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `worker_leaves_of_absence.dateOfFirstAbsence`

            **Date Of First Absence.** The date of the first absence in this leave. It anchors the worker leave-of-absence records on the provider's reported timeline.

            * **Enables:** Match date of first absence in `worker_leaves_of_absence.dateOfFirstAbsence` to the relevant worker, leave type, unit, and effective date for authorized leave administration.
            * **Interpretation:** Workday reports date of first absence as a calendar date on each worker leave-of-absence records; its grain is one day and no time of day should be inferred. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.
          </Accordion>

          <Accordion id="provider-permission-field-workday-worker-leaves-of-absence-descriptor-bf2aaace1183" title="Descriptor" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `worker_leaves_of_absence.descriptor`

            **Descriptor.** Human-readable descriptor for the leave of absence. It gives the worker leaves of absence a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Match descriptor in `worker_leaves_of_absence.descriptor` to the relevant worker, leave type, unit, and effective date for authorized leave administration.
            * **Interpretation:** Workday reports descriptor on each worker leave-of-absence records; missing and empty values can have different meanings. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.
          </Accordion>

          <Accordion id="provider-permission-field-workday-worker-leaves-of-absence-effectivedate-33151f3e45bc" title="Effective Date" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `worker_leaves_of_absence.effectiveDate`

            **Effective Date.** The effective date of the leave of absence. It anchors the worker leave-of-absence records on the provider's reported timeline.

            * **Enables:** Match effective date in `worker_leaves_of_absence.effectiveDate` to the relevant worker, leave type, unit, and effective date for authorized leave administration.
            * **Interpretation:** Workday reports effective date as a calendar date on each worker leave-of-absence records; its grain is one day and no time of day should be inferred. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.
          </Accordion>

          <Accordion id="provider-permission-field-workday-worker-leaves-of-absence-id-3d9bef9be3cb" title="ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `worker_leaves_of_absence.id`

            **ID.** Workday unique identifier for the leave of absence record. It provides the reference needed to connect the worker leave-of-absence records to the corresponding provider object.

            * **Enables:** Match repeated worker leave-of-absence records entries on ID in `worker_leaves_of_absence.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Workday reports ID as an identifier in its worker leave-of-absence records namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.
          </Accordion>

          <Accordion id="provider-permission-field-workday-worker-leaves-of-absence-multiplechildin-3d053b9117f8" title="Multiple Child Indicator" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `worker_leaves_of_absence.multipleChildIndicator`

            **Multiple Child Indicator.** Indicates whether the leave involves multiple children. It distinguishes the provider-defined multiple child indicator state or classification for the worker leaves of absence.

            * **Enables:** Match multiple child indicator in `worker_leaves_of_absence.multipleChildIndicator` to the relevant worker, leave type, unit, and effective date for authorized leave administration.
            * **Interpretation:** Workday reports multiple child indicator on each worker leave-of-absence records; missing and empty values can have different meanings. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.
          </Accordion>

          <Accordion id="provider-permission-field-workday-worker-leaves-of-absence-singleparentind-85d98df23794" title="Single Parent Indicator" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `worker_leaves_of_absence.singleParentIndicator`

            **Single Parent Indicator.** Indicates whether the worker is a single parent. It distinguishes the provider-defined single parent indicator state or classification for the worker leaves of absence.

            * **Enables:** Filter Worker Leaves Of Absence by the exact Workday-defined single parent indicator in `worker_leaves_of_absence.singleParentIndicator` and preserve unknown values as distinct categories.
            * **Interpretation:** Workday supplies single parent indicator from its own taxonomy on each worker leaves of absence; preserve unknown and newly introduced labels. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.
          </Accordion>

          <Accordion id="provider-permission-field-workday-worker-leaves-of-absence-stoppaymentdate-80ecdf966226" title="Stop Payment Date" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `worker_leaves_of_absence.stopPaymentDate`

            **Stop Payment Date.** Date on which payment stops during the leave. It anchors the worker leave-of-absence records on the provider's reported timeline.

            * **Enables:** Match stop payment date in `worker_leaves_of_absence.stopPaymentDate` to the relevant worker, leave type, unit, and effective date for authorized leave administration.
            * **Interpretation:** Workday reports stop payment date as a calendar date on each worker leave-of-absence records; its grain is one day and no time of day should be inferred. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.
          </Accordion>

          <Accordion id="provider-permission-field-workday-worker-leaves-of-absence-worker-id-fcda55804294" title="Worker ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `worker_leaves_of_absence.worker_id`

            **Worker ID.** Parent worker reference copied into each worker leave-of-absence records because the child operation does not return that relationship. It provides the reference needed to connect the worker leave-of-absence records to the corresponding provider object.

            * **Enables:** Connect each worker leave-of-absence records in worker leave-of-absence records to the referenced worker through `worker_leaves_of_absence.worker_id`; flag worker ID values that do not resolve in that provider namespace.
            * **Interpretation:** Parable copies worker ID from the parent traversal record into each worker leave-of-absence records; the child Workday operation does not return it. This sensitive workforce attribute is for authorized leave administration only and must not be used for health or performance inference.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-workday-worker-pay-slips-e1a50c4c6ce9" title="Worker Pay Slips" icon="people-group" iconType="sharp-duotone-solid">
        Developer identifier: `worker_pay_slips`

        **Worker Pay Slips.** Pay slips for a worker from the Payroll API.

        * **Enables:** Match pay-slip references to workers for payroll-record completeness checks.
        * **Scope:** Reads the records selected by Workday's `/ccx/api/payroll/v2/{tenantName}/workers/{worker_id}/paySlips` operation as a snapshot stream using full synchronization. This stream is opt-in. Visibility follows the Workday integration system user's domain and report permissions. Use is limited to authorized workforce and payroll reconciliation; the records are not invoices and do not support performance inference. A later complete read can treat a previously seen record that is absent as removed.

        <AccordionGroup>
          <Accordion id="provider-permission-field-workday-worker-pay-slips-descriptor-f79b48d18c7a" title="Descriptor" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `worker_pay_slips.descriptor`

            **Descriptor.** The provider-reported descriptor for each worker pay slip in Worker Pay Slips. It gives the worker pay slip a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `worker_pay_slips.descriptor` for each worker pay slip; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each worker pay slip; it is not a stable identity. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-worker-pay-slips-id-e784ddfa0c50" title="ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `worker_pay_slips.id`

            **ID.** The provider-reported ID for each worker pay slip in Worker Pay Slips. It provides the reference needed to connect the worker pay slip to the corresponding provider object.

            * **Enables:** Match repeated worker pay slip entries on ID in `worker_pay_slips.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Workday reports ID as an identifier in its worker pay slip namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-worker-pay-slips-worker-59eb79bf256e" title="Worker" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `worker_pay_slips.worker`

            **Worker.** The structured worker details attached to each worker pay slip in Worker Pay Slips. It preserves the nested context needed to interpret the parent worker pay slip.

            * **Enables:** Attribute worker in `worker_pay_slips.worker` to the parent worker pay slip; identify parent records where that nested worker object is absent.
            * **Interpretation:** Workday reports worker as a nested object on each worker pay slip; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-worker-pay-slips-worker-id-476a331f184a" title="Worker ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `worker_pay_slips.worker_id`

            **Worker ID.** Parent worker reference copied into each worker pay slip because the child operation does not return that relationship. It provides the reference needed to connect the worker pay slip to the corresponding provider object.

            * **Enables:** Connect each worker pay slip in Worker Pay Slips to the referenced worker through `worker_pay_slips.worker_id`; flag worker ID values that do not resolve in that provider namespace.
            * **Interpretation:** Parable copies worker ID from the parent traversal record into each worker pay slip; the child Workday operation does not return it. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-workday-worker-time-blocks-33770a50dee3" title="Worker Time Blocks" icon="people-group" iconType="sharp-duotone-solid">
        Developer identifier: `worker_time_blocks`

        **Worker Time Blocks.** Extracts time block records for workers from the Workday Time Tracking REST API. Time blocks represent individual time entries logged by workers. Uses the explicit service path for Time Tracking. Paginated via offset/limit. Note: the /v1/ shortcut returns 404 for Time Tracking; the explicit versioned path is required. Confidence in exact query parameters is moderate — consult Time Tracking API docs for additional filter params (e.g., startDate, endDate).

        * **Enables:** Reconcile reported work dates and hours to the worker and Workday time-block reference.
        * **Scope:** Reads the records selected by Workday's `/ccx/api/timeTracking/v5/{tenantName}/workerTimeBlocks` operation as a snapshot stream using full synchronization. This stream is opt-in. Visibility follows the Workday integration system user's domain and report permissions. Use is limited to authorized workforce time-entry reconciliation; recorded hours are not a Parable judgment about employee performance. A later complete read can treat a previously seen record that is absent as removed.

        <AccordionGroup>
          <Accordion id="provider-permission-field-workday-worker-time-blocks-date-9a719c51353c" title="Date" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `worker_time_blocks.date`

            **Date.** Date of the time block entry. It anchors the worker time block on the provider's reported timeline.

            * **Enables:** Order Worker Time Blocks by date in `worker_time_blocks.date` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Workday reports date as a calendar date on each worker time block; its grain is one day and no time of day should be inferred.
          </Accordion>

          <Accordion id="provider-permission-field-workday-worker-time-blocks-descriptor-95040d302b1d" title="Descriptor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `worker_time_blocks.descriptor`

            **Descriptor.** Human-readable descriptor for the time block. It gives the worker time block a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `worker_time_blocks.descriptor` for each worker time block; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each worker time block; it is not a stable identity.
          </Accordion>

          <Accordion id="provider-permission-field-workday-worker-time-blocks-hours-e0202130cb74" title="Hours" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `worker_time_blocks.hours`

            **Hours.** Number of hours recorded in this time block. It supplies the hours measure for the worker time block at the provider's declared unit and grain.

            * **Enables:** Measure hours through `worker_time_blocks.hours` for each worker time block and compare only values with the same unit and record grain.
            * **Interpretation:** Workday reports hours as a measure on each worker time block; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-workday-worker-time-blocks-id-9ca9923a093d" title="ID" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `worker_time_blocks.id`

            **ID.** Workday unique identifier for the time block. It provides the reference needed to connect the worker time block to the corresponding provider object.

            * **Enables:** Match repeated worker time block entries on ID in `worker_time_blocks.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Workday reports ID as an identifier in its worker time block namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-workday-worker-time-blocks-worker-4da7a8886c81" title="Worker" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `worker_time_blocks.worker`

            **Worker.** Worker reference (ID/descriptor/href) who logged this time block. It preserves the nested context needed to interpret the parent worker time block.

            * **Enables:** Attribute worker in `worker_time_blocks.worker` to the parent worker time block; identify parent records where that nested worker object is absent.
            * **Interpretation:** Workday reports worker as a nested object on each worker time block; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-workday-worker-time-blocks-worker-descriptor-6b9b36b3dc9a" title="Descriptor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `worker_time_blocks.worker.descriptor`

            **Descriptor.** Display name of the worker. It gives the worker a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `worker_time_blocks.worker.descriptor` for each worker; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each worker; it is not a stable identity.
          </Accordion>

          <Accordion id="provider-permission-field-workday-worker-time-blocks-worker-href-ccf5c37edb5b" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `worker_time_blocks.worker.href`

            **Href.** API URL to the worker resource. It locates the provider resource or path associated with the worker.

            * **Enables:** Associate each worker with the resource identified by href in `worker_time_blocks.worker.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each worker; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-workday-worker-time-blocks-worker-id-0d0639cc36f0" title="ID" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `worker_time_blocks.worker.id`

            **ID.** Workday ID of the worker. It provides the reference needed to connect the worker time block to the corresponding provider object.

            * **Enables:** Connect each worker in Worker Time Blocks to the referenced worker through `worker_time_blocks.worker.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its worker namespace; it is not a universal identity outside Workday.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-workday-workers-cb4c5589bb2b" title="Workers" icon="people-group" iconType="sharp-duotone-solid">
        Developer identifier: `workers`

        **Workers.** Employee and contingent worker records from the Staffing API.

        * **Enables:** Reconcile employee and contingent-worker identities with employment status, organization, manager, job, location, and authorized compensation context.
        * **Scope:** Reads the records selected by Workday's `/ccx/api/staffing/v7/{tenantName}/workers` operation as a snapshot stream using full synchronization. Visibility follows the Workday integration system user's domain and report permissions. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. A later complete read can treat a previously seen record that is absent as removed.

        <AccordionGroup>
          <Accordion id="provider-permission-field-workday-workers-additionalemails-ac14890bc246" title="Additional Emails" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.additionalEmails`

            **Additional Emails.** Additional email addresses associated with the worker. It preserves the nested context needed to interpret the parent worker.

            * **Enables:** Reconcile each returned email record in `workers.additionalEmails` with the parent worker's provider profile; preserve distinct aliases, contact points, and organization attributes.
            * **Interpretation:** Workday returns additional emails as an array of email record entries on each worker; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-additionalemails-emailaddress-39a7f1c43e0e" title="Email Address" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.additionalEmails.emailAddress`

            **Email Address.** The email address. It supplies the provider-reported address or location facet for the email record, not a residency determination.

            * **Enables:** Match repeated email record entries on email address in `workers.EmailRecord.emailAddress`; collapse only entries that share this declared transform key.
            * **Interpretation:** Workday reports email address as an address on each email record; aliases, casing, and unverified addresses can prevent a one-to-one person match. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-additionalemails-isprimary-ef7ba3ece65f" title="Is Primary" icon="comment-dots" iconType="sharp-duotone-solid">
            Developer identifier: `workers.additionalEmails.isPrimary`

            **Is Primary.** Whether this is the primary email for the usage type. It distinguishes the provider-defined is primary state or classification for the email record.

            * **Enables:** Filter Workers by whether this is the primary email for the usage type in `workers.EmailRecord.isPrimary`; count true, false, and missing results separately.
            * **Interpretation:** Workday reports this is the primary email for the usage type as a boolean on each email record; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-additionalemails-usagetype-bb43989c660f" title="Usage Type" icon="comment-dots" iconType="sharp-duotone-solid">
            Developer identifier: `workers.additionalEmails.usageType`

            **Usage Type.** Usage type (e.g., Work, Home). It distinguishes the provider-defined usage type state or classification for the email record.

            * **Enables:** Segment email record entries in Workers by usage type in `workers.EmailRecord.usageType`; compare counts only within the same Workday taxonomy.
            * **Interpretation:** Workday reports usage type as a label from its own taxonomy on each email record; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-additionalphones-551a4ae7115d" title="Additional Phones" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.additionalPhones`

            **Additional Phones.** Additional phone numbers associated with the worker. It preserves the nested context needed to interpret the parent worker.

            * **Enables:** Reconcile each returned phone record in `workers.additionalPhones` with the parent worker's provider profile; preserve distinct aliases, contact points, and organization attributes.
            * **Interpretation:** Workday returns additional phones as an array of phone record entries on each worker; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-additionalphones-devicetype-f6c6ec2898ea" title="Device Type" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.additionalPhones.deviceType`

            **Device Type.** Device type (e.g., Landline, Mobile). It distinguishes the provider-defined device type state or classification for the phone record.

            * **Enables:** Segment phone record entries in Workers by device type in `workers.PhoneRecord.deviceType`; compare counts only within the same Workday taxonomy.
            * **Interpretation:** Workday reports device type as a label from its own taxonomy on each phone record; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-additionalphones-isprimary-77f7bee588e9" title="Is Primary" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.additionalPhones.isPrimary`

            **Is Primary.** Whether this is the primary phone for the usage type. It distinguishes the provider-defined is primary state or classification for the phone record.

            * **Enables:** Filter Workers by whether this is the primary phone for the usage type in `workers.PhoneRecord.isPrimary`; count true, false, and missing results separately.
            * **Interpretation:** Workday reports this is the primary phone for the usage type as a boolean on each phone record; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-additionalphones-phonenumber-9a126bdf32ff" title="Phone Number" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.additionalPhones.phoneNumber`

            **Phone Number.** The phone number. It supplies the phone number profile facet used to reconcile or attribute the phone record.

            * **Enables:** Match repeated phone record entries on phone number in `workers.PhoneRecord.phoneNumber`; collapse only entries that share this declared transform key.
            * **Interpretation:** Workday reports phone number on each phone record; missing and empty values can have different meanings. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-additionalphones-usagetype-05650ddf7d04" title="Usage Type" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.additionalPhones.usageType`

            **Usage Type.** Usage type (e.g., Work, Home, Mobile). It distinguishes the provider-defined usage type state or classification for the phone record.

            * **Enables:** Segment phone record entries in Workers by usage type in `workers.PhoneRecord.usageType`; compare counts only within the same Workday taxonomy.
            * **Interpretation:** Workday reports usage type as a label from its own taxonomy on each phone record; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-addresses-c4cd7b7651c6" title="Addresses" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.addresses`

            **Addresses.** Addresses associated with the worker. It preserves the nested context needed to interpret the parent worker.

            * **Enables:** Reconcile each returned address record in `workers.addresses` with the parent worker's provider profile; preserve distinct aliases, contact points, and organization attributes.
            * **Interpretation:** Workday returns addresses as an array of address record entries on each worker; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-addresses-addressline1-1613c29dffd3" title="Address Line1" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.addresses.addressLine1`

            **Address Line1.** First line of the address. It supplies the provider-reported address or location facet for the address record, not a residency determination.

            * **Enables:** Group Workers by the exact address line1 in `workers.AddressRecord.addressLine1` while keeping that address or location separate from geolocation and residency claims.
            * **Interpretation:** Workday reports address line1 as an address or location facet on each address record; it does not establish verified geolocation or data residency.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-addresses-addressline2-f7891b5e49a5" title="Address Line2" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.addresses.addressLine2`

            **Address Line2.** Second line of the address. It supplies the provider-reported address or location facet for the address record, not a residency determination.

            * **Enables:** Group Workers by the exact address line2 in `workers.AddressRecord.addressLine2` while keeping that address or location separate from geolocation and residency claims.
            * **Interpretation:** Workday reports address line2 as an address or location facet on each address record; it does not establish verified geolocation or data residency.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-addresses-city-0c174eafc75d" title="City" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.addresses.city`

            **City.** City or municipality. It supplies the provider-reported address or location facet for the address record, not a residency determination.

            * **Enables:** Group Workers by city in `workers.AddressRecord.city` without treating that user, device, or request attribute as a data-residency signal.
            * **Interpretation:** Workday reports city as a user, device, request, or resource location attribute on each address record; it does not establish where data is stored or processed.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-addresses-country-c16d6c6e1684" title="Country" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.addresses.country`

            **Country.** Country code (ISO 3166-1 alpha-2). It supplies the provider-reported address or location facet for the address record, not a residency determination.

            * **Enables:** Group Workers by country in `workers.AddressRecord.country` without treating that user, device, or request attribute as a data-residency signal.
            * **Interpretation:** Workday reports country as a user, device, request, or resource location attribute on each address record; it does not establish where data is stored or processed.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-addresses-isprimary-38c3607843ba" title="Is Primary" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.addresses.isPrimary`

            **Is Primary.** Whether this is the primary address for the usage type. It distinguishes the provider-defined is primary state or classification for the address record.

            * **Enables:** Filter Workers by whether this is the primary address for the usage type in `workers.AddressRecord.isPrimary`; count true, false, and missing results separately.
            * **Interpretation:** Workday reports this is the primary address for the usage type as a boolean on each address record; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-addresses-postalcode-cc3eed6efe74" title="Postal Code" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.addresses.postalCode`

            **Postal Code.** Postal or ZIP code. It supplies the provider-reported address or location facet for the address record, not a residency determination.

            * **Enables:** Group Workers by the exact postal code in `workers.AddressRecord.postalCode` while keeping that address or location separate from geolocation and residency claims.
            * **Interpretation:** Workday reports postal code as an address or location facet on each address record; it does not establish verified geolocation or data residency.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-addresses-stateprovince-4307da1786cf" title="State Province" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.addresses.stateProvince`

            **State Province.** State, province, or region. It supplies the provider-reported address or location facet for the address record, not a residency determination.

            * **Enables:** Group Workers by state province in `workers.AddressRecord.stateProvince` without treating that user, device, or request attribute as a data-residency signal.
            * **Interpretation:** Workday reports state province as a user, device, request, or resource location attribute on each address record; it does not establish where data is stored or processed.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-addresses-usagetype-55409d028bd6" title="Usage Type" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.addresses.usageType`

            **Usage Type.** Usage type (e.g., Work, Home). It distinguishes the provider-defined usage type state or classification for the address record.

            * **Enables:** Segment address record entries in Workers by usage type in `workers.AddressRecord.usageType`; compare counts only within the same Workday taxonomy.
            * **Interpretation:** Workday reports usage type as a label from its own taxonomy on each address record; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-businesssite-80e0436a7317" title="Business Site" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.businessSite`

            **Business Site.** The business site or office location. It preserves the nested context needed to interpret the parent worker.

            * **Enables:** Attribute business site in `workers.businessSite` to the parent worker; identify parent records where that nested business site object is absent.
            * **Interpretation:** Workday reports business site as a nested object on each worker; optional children may be absent from a valid response. This nested location attribute does not establish where data is stored or processed and is not a residency signal.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-businesssite-descriptor-76b895f55cca" title="Descriptor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.businessSite.descriptor`

            **Descriptor.** Display name of the business site. It gives the business site ref a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `workers.BusinessSiteRef.descriptor` for each business site ref; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each business site ref; it is not a stable identity.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-businesssite-href-cf217eb647e2" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.businessSite.href`

            **Href.** API URL to the business site resource. It locates the provider resource or path associated with the business site ref.

            * **Enables:** Associate each business site ref with the resource identified by href in `workers.BusinessSiteRef.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each business site ref; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-businesssite-id-7bd9950b874f" title="ID" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.businessSite.id`

            **ID.** Unique identifier for the business site. It provides the reference needed to connect the worker to the corresponding provider object.

            * **Enables:** Connect each business site ref in Workers to the referenced business site ref through `workers.BusinessSiteRef.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its business site ref namespace; it is not a universal identity outside Workday.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-businesstitle-9ba81ea12dbc" title="Business Title" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.businessTitle`

            **Business Title.** The worker's current business title. It supplies the business title profile facet used to reconcile or attribute the worker.

            * **Enables:** Label each worker with business title from `workers.businessTitle`; distinguish records that share that display name but have different Workday identifiers.
            * **Interpretation:** Workday reports business title as display text for each worker; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-company-c3117e16711e" title="Company" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.company`

            **Company.** The company entity the worker belongs to. It preserves the nested context needed to interpret the parent worker.

            * **Enables:** Attribute company in `workers.company` to the parent worker; identify parent records where that nested company object is absent.
            * **Interpretation:** Workday reports company as a nested object on each worker; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-company-descriptor-47a4c81705b9" title="Descriptor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.company.descriptor`

            **Descriptor.** Display name of the company. It gives the company ref a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `workers.CompanyRef.descriptor` for each company ref; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each company ref; it is not a stable identity.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-company-href-84058ae3be4d" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.company.href`

            **Href.** API URL to the company resource. It locates the provider resource or path associated with the company ref.

            * **Enables:** Associate each company ref with the resource identified by href in `workers.CompanyRef.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each company ref; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-company-id-13de5b3f28a4" title="ID" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.company.id`

            **ID.** Unique identifier for the company. It provides the reference needed to connect the worker to the corresponding provider object.

            * **Enables:** Connect each company ref in Workers to the referenced company ref through `workers.CompanyRef.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its company ref namespace; it is not a universal identity outside Workday.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-compensationsummary-67ec84f0e01a" title="Compensation Summary" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.compensationSummary`

            **Compensation Summary.** Summary of the worker's compensation details. It preserves the nested context needed to interpret the parent worker.

            * **Enables:** Attribute compensation summary in `workers.compensationSummary` to the parent worker; identify parent records where that nested compensation summary object is absent.
            * **Interpretation:** Workday reports compensation summary as a nested object on each worker; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-compensationsummary-compensation-3d8c883e5aca" title="Compensation Grade" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.compensationSummary.compensationGrade`

            **Compensation Grade.** The compensation grade assigned to the worker. It preserves the nested context needed to interpret the parent worker.

            * **Enables:** Attribute compensation grade in `workers.CompensationSummary.compensationGrade` to the parent worker; identify parent records where that nested compensation grade object is absent.
            * **Interpretation:** Workday reports compensation grade as a nested object on each compensation summary; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-compensationsummary-compensation-3bd30f0e0742" title="Descriptor" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.compensationSummary.compensationGrade.descriptor`

            **Descriptor.** Display name of the compensation grade. It gives the compensation grade ref a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Reconcile descriptor in `workers.CompensationGradeRef.descriptor` by pairing it with the same worker or position, currency, pay basis, and effective period.
            * **Interpretation:** Workday reports descriptor on each compensation grade ref; missing and empty values can have different meanings. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-compensationsummary-compensation-7a6e3bad952a" title="ID" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.compensationSummary.compensationGrade.id`

            **ID.** Unique identifier for the compensation grade. It provides the reference needed to connect the worker to the corresponding provider object.

            * **Enables:** Connect each compensation grade ref in Workers to the referenced compensation grade ref through `workers.CompensationGradeRef.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its compensation grade ref namespace; it is not a universal identity outside Workday. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-compensationsummary-compensation-1d4032935a91" title="Compensation Step" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.compensationSummary.compensationStep`

            **Compensation Step.** The compensation step within the grade, if applicable. It distinguishes the provider-defined compensation step state or classification for the compensation summary.

            * **Enables:** Reconcile compensation step in `workers.CompensationSummary.compensationStep` by pairing it with the same worker or position, currency, pay basis, and effective period.
            * **Interpretation:** Workday reports compensation step on each compensation summary; missing and empty values can have different meanings. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-compensationsummary-currency-97f70e179fa1" title="Currency" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.compensationSummary.currency`

            **Currency.** ISO 4217 currency code for compensation values. It distinguishes the provider-defined currency state or classification for the compensation summary.

            * **Enables:** Reconcile currency in `workers.CompensationSummary.currency` by pairing it with the same worker or position, currency, pay basis, and effective period.
            * **Interpretation:** Workday reports currency on each compensation summary; missing and empty values can have different meanings. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-compensationsummary-totalbasepay-cea5fe1b8634" title="Total Base Pay Amount" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.compensationSummary.totalBasePayAmount`

            **Total Base Pay Amount.** Total base pay amount. It preserves the nested context needed to interpret the parent worker.

            * **Enables:** Attribute total base pay amount in `workers.CompensationSummary.totalBasePayAmount` to the parent worker; identify parent records where that nested total base pay amount object is absent.
            * **Interpretation:** Workday reports total base pay amount as a nested object on each compensation summary; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-compensationsummary-totalbasepay-09d1099674c1" title="Amount" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.compensationSummary.totalBasePayAmount.amount`

            **Amount.** Numeric monetary value. It supplies the amount measure for the money amount at the provider's declared unit and grain.

            * **Enables:** Measure amount through `workers.MoneyAmount.amount` for each money amount and compare only values with the same unit and record grain.
            * **Interpretation:** Workday reports amount as a measure on each money amount; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-compensationsummary-totalbasepay-94c3ebd9f517" title="Currency" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.compensationSummary.totalBasePayAmount.currency`

            **Currency.** ISO 4217 currency code. It distinguishes the provider-defined currency state or classification for the money amount.

            * **Enables:** Filter Workers by the exact Workday-defined currency in `workers.MoneyAmount.currency` and preserve unknown values as distinct categories.
            * **Interpretation:** Workday supplies currency from its own taxonomy on each money amount; preserve unknown and newly introduced labels.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-compensationsummary-totalbasepay-858458baa32d" title="Total Base Pay Annualized Amount" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.compensationSummary.totalBasePayAnnualizedAmount`

            **Total Base Pay Annualized Amount.** Annualized total base pay amount. It preserves the nested context needed to interpret the parent worker.

            * **Enables:** Attribute total base pay annualized amount in `workers.CompensationSummary.totalBasePayAnnualizedAmount` to the parent worker; identify parent records where that nested total base pay annualized amount object is absent.
            * **Interpretation:** Workday reports total base pay annualized amount as a nested object on each compensation summary; optional children may be absent from a valid response. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-compensationsummary-totalbasepay-c997f35256f5" title="Total Base Pay Frequency" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.compensationSummary.totalBasePayFrequency`

            **Total Base Pay Frequency.** Frequency of base pay (e.g., Annual, Monthly, Hourly). It supplies the total base pay frequency measure for the compensation summary at the provider's declared unit and grain.

            * **Enables:** Reconcile total base pay frequency in `workers.CompensationSummary.totalBasePayFrequency` by pairing it with the same worker or position, currency, pay basis, and effective period.
            * **Interpretation:** Workday reports total base pay frequency as a count at the parent record's grain on each compensation summary; compare only records with the same unit and aggregation grain. Use is limited to authorized workforce or payroll reconciliation and must not be used to infer employee performance. Any monetary amount is a provider HR or payroll record at its stated currency and pay basis, not an invoice.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-contingentworkerid-10234bab69bc" title="Contingent Worker ID" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.contingentWorkerID`

            **Contingent Worker ID.** Contingent worker ID, if applicable. It provides the reference needed to connect the worker to the corresponding provider object.

            * **Enables:** Connect each worker in Workers to the referenced contingent worker through `workers.contingentWorkerID`; flag contingent worker ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports contingent worker ID as an identifier in its contingent worker namespace; it is not a universal identity outside Workday.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-costcenter-5def3478286f" title="Cost Center" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.costCenter`

            **Cost Center.** The cost center the worker is assigned to. It preserves the nested context needed to interpret the parent worker.

            * **Enables:** Attribute cost center in `workers.costCenter` to the parent worker; identify parent records where that nested cost center object is absent.
            * **Interpretation:** Workday reports cost center as a nested object on each worker; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-costcenter-descriptor-59d9885077ff" title="Descriptor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.costCenter.descriptor`

            **Descriptor.** Display name of the cost center. It gives the cost center ref a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `workers.CostCenterRef.descriptor` for each cost center ref; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each cost center ref; it is not a stable identity.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-costcenter-href-5c9952d480cf" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.costCenter.href`

            **Href.** API URL to the cost center resource. It locates the provider resource or path associated with the cost center ref.

            * **Enables:** Associate each cost center ref with the resource identified by href in `workers.CostCenterRef.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each cost center ref; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-costcenter-id-d731535ccc64" title="ID" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.costCenter.id`

            **ID.** Unique identifier for the cost center. It provides the reference needed to connect the worker to the corresponding provider object.

            * **Enables:** Connect each cost center ref in Workers to the referenced cost center ref through `workers.CostCenterRef.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its cost center ref namespace; it is not a universal identity outside Workday.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-customfields-d8f6a620cb28" title="Custom Fields" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.customFields`

            **Custom Fields.** Custom fields configured in the Workday tenant for workers. It preserves the nested context needed to interpret the parent worker.

            * **Enables:** Attribute custom fields in `workers.customFields` to the parent worker; identify parent records where that nested custom fields object is absent.
            * **Interpretation:** Workday reports custom fields as a nested object on each worker; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-defaultweeklyhours-e0ac4353c711" title="Default Weekly Hours" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.defaultWeeklyHours`

            **Default Weekly Hours.** Default weekly hours for the position. It supplies the default weekly hours measure for the worker at the provider's declared unit and grain.

            * **Enables:** Measure default weekly hours through `workers.defaultWeeklyHours` for each worker and compare only values with the same unit and record grain.
            * **Interpretation:** Workday reports default weekly hours as a measure on each worker; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-department-5adadc07cf8d" title="Department" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.department`

            **Department.** The department the worker belongs to. It preserves the nested context needed to interpret the parent worker.

            * **Enables:** Attribute department in `workers.department` to the parent worker; identify parent records where that nested department object is absent.
            * **Interpretation:** Workday reports department as a nested object on each worker; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-department-descriptor-ff2935dca374" title="Descriptor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.department.descriptor`

            **Descriptor.** Display name of the department. It gives the department ref a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `workers.DepartmentRef.descriptor` for each department ref; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each department ref; it is not a stable identity.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-department-href-3539387cd15c" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.department.href`

            **Href.** API URL to the department resource. It locates the provider resource or path associated with the department ref.

            * **Enables:** Associate each department ref with the resource identified by href in `workers.DepartmentRef.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each department ref; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-department-id-2f8fff4a24d5" title="ID" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.department.id`

            **ID.** Unique identifier for the department. It provides the reference needed to connect the worker to the corresponding provider object.

            * **Enables:** Connect each department ref in Workers to the referenced department ref through `workers.DepartmentRef.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its department ref namespace; it is not a universal identity outside Workday.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-descriptor-c4f7a698a32b" title="Descriptor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.descriptor`

            **Descriptor.** Display name of the worker. It gives the worker a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `workers.descriptor` for each worker; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each worker; it is not a stable identity. A connector directive maps this field to a person's display name.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-email-431be5f98da6" title="Email" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.email`

            **Email.** Primary work email address of the worker. It supplies the provider-reported address or location facet for the worker, not a residency determination.

            * **Enables:** Attribute each worker to a person or account by the exact email in `workers.email`; identify addresses that do not match the Workday directory.
            * **Interpretation:** Workday reports email as an address on each worker; aliases, casing, and unverified addresses can prevent a one-to-one person match. A connector directive maps this field to a person's email identity.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-employeeid-f2f5e5342953" title="Employee ID" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.employeeID`

            **Employee ID.** Employee ID assigned by the organization. It provides the reference needed to connect the worker to the corresponding provider object.

            * **Enables:** Connect each worker in Workers to the referenced employee through `workers.employeeID`; flag employee ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports employee ID as an identifier in its employee namespace; it is not a universal identity outside Workday.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-endemploymentdate-c7e679fb153e" title="End Employment Date" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.endEmploymentDate`

            **End Employment Date.** The date employment ended, if applicable. It anchors the worker on the provider's reported timeline.

            * **Enables:** Filter Workers by end employment date in `workers.endEmploymentDate`; pair that boundary with the corresponding start before measuring elapsed time.
            * **Interpretation:** Workday reports end employment date as a calendar date on each worker; its grain is one day and no time of day should be inferred.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-hiredate-93d3a09fe325" title="Hire Date" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.hireDate`

            **Hire Date.** The date the worker was originally hired. It anchors the worker on the provider's reported timeline.

            * **Enables:** Order Workers by hire date in `workers.hireDate` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Workday reports hire date as a calendar date on each worker; its grain is one day and no time of day should be inferred.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-href-6dfd63cce748" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.href`

            **Href.** API URL to the worker resource. It locates the provider resource or path associated with the worker.

            * **Enables:** Associate each worker with the resource identified by href in `workers.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each worker; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-id-da251f718376" title="ID" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.id`

            **ID.** Unique Workday ID for the worker. Primary key for cross-system identity resolution. It provides the reference needed to connect the worker to the corresponding provider object.

            * **Enables:** Match repeated worker entries on ID in `workers.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Workday reports ID as an identifier in its worker namespace; it is not a universal identity outside Workday. The connector explicitly marks this field as a transform deduplication key. A connector directive maps this field to account identity.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-isactive-68788b977b3e" title="Is Active" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.isActive`

            **Is Active.** Whether the worker is currently active. It distinguishes the provider-defined is active state or classification for the worker.

            * **Enables:** Filter Workers by whether the worker is currently active in `workers.isActive`; count true, false, and missing results separately.
            * **Interpretation:** Workday reports the worker is currently active as a boolean on each worker; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-jobcategory-ba6f92a4d4c2" title="Job Category" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.jobCategory`

            **Job Category.** The job category classification. It distinguishes the provider-defined job category state or classification for the worker.

            * **Enables:** Segment worker entries in Workers by job category in `workers.jobCategory`; compare counts only within the same Workday taxonomy.
            * **Interpretation:** Workday reports job category as a label from its own taxonomy on each worker; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-jobfamily-8e9ab42bccbe" title="Job Family" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.jobFamily`

            **Job Family.** The job family grouping for the worker's role. It preserves the nested context needed to interpret the parent worker.

            * **Enables:** Attribute job family in `workers.jobFamily` to the parent worker; identify parent records where that nested job family object is absent.
            * **Interpretation:** Workday reports job family as a nested object on each worker; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-jobfamily-descriptor-58b7d9aa14c5" title="Descriptor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.jobFamily.descriptor`

            **Descriptor.** Display name of the job family. It gives the job family ref a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `workers.JobFamilyRef.descriptor` for each job family ref; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each job family ref; it is not a stable identity.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-jobfamily-href-1e8927bc1566" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.jobFamily.href`

            **Href.** API URL to the job family resource. It locates the provider resource or path associated with the job family ref.

            * **Enables:** Associate each job family ref with the resource identified by href in `workers.JobFamilyRef.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each job family ref; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-jobfamily-id-bed361585fa6" title="ID" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.jobFamily.id`

            **ID.** Unique identifier for the job family. It provides the reference needed to connect the worker to the corresponding provider object.

            * **Enables:** Connect each job family ref in Workers to the referenced job family ref through `workers.JobFamilyRef.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its job family ref namespace; it is not a universal identity outside Workday.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-jobprofile-d368d06ed02e" title="Job Profile" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.jobProfile`

            **Job Profile.** The job profile associated with the worker's current position. It preserves the nested context needed to interpret the parent worker.

            * **Enables:** Attribute job profile in `workers.jobProfile` to the parent worker; identify parent records where that nested job profile object is absent.
            * **Interpretation:** Workday reports job profile as a nested object on each worker; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-jobprofile-descriptor-6d48a3e5fe07" title="Descriptor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.jobProfile.descriptor`

            **Descriptor.** Display name of the job profile. It gives the job profile ref a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `workers.JobProfileRef.descriptor` for each job profile ref; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each job profile ref; it is not a stable identity.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-jobprofile-href-6da8747c63b2" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.jobProfile.href`

            **Href.** API URL to the job profile resource. It locates the provider resource or path associated with the job profile ref.

            * **Enables:** Associate each job profile ref with the resource identified by href in `workers.JobProfileRef.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each job profile ref; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-jobprofile-id-fd88d8309665" title="ID" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.jobProfile.id`

            **ID.** Unique identifier for the job profile. It provides the reference needed to connect the worker to the corresponding provider object.

            * **Enables:** Connect each job profile ref in Workers to the referenced job profile ref through `workers.JobProfileRef.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its job profile ref namespace; it is not a universal identity outside Workday.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-lastfunctionalityupdate-6ae1d648c98f" title="Last Functionality Update" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.lastFunctionalityUpdate`

            **Last Functionality Update.** Timestamp of the last functional update to this worker record, useful for incremental sync. It anchors the worker on the provider's reported timeline.

            * **Enables:** Order Workers by last functionality update in `workers.lastFunctionalityUpdate` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Workday reports last functionality update as a timestamp on each worker; timezone and precision follow this API field, and absence is not an inferred event time. A connector directive uses this field to order records for latest-state or incremental processing.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-legalname-8d91171dc00c" title="Legal Name" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.legalName`

            **Legal Name.** Legal name of the worker. It preserves the nested context needed to interpret the parent worker.

            * **Enables:** Attribute legal name in `workers.legalName` to the parent worker; identify parent records where that nested legal name object is absent.
            * **Interpretation:** Workday reports legal name as a nested object on each worker; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-legalname-firstname-20998d1387a1" title="First Name" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.legalName.firstName`

            **First Name.** First/given name. It gives the person name a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each person name with first name from `workers.PersonName.firstName`; distinguish records that share that display name but have different Workday identifiers.
            * **Interpretation:** Workday reports first name as display text for each person name; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-legalname-fullname-2bcc53cee919" title="Full Name" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.legalName.fullName`

            **Full Name.** Full formatted name. It gives the person name a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each person name with full name from `workers.PersonName.fullName`; distinguish records that share that display name but have different Workday identifiers.
            * **Interpretation:** Workday reports full name as display text for each person name; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-legalname-lastname-c1886b2caaea" title="Last Name" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.legalName.lastName`

            **Last Name.** Last/family name. It gives the person name a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each person name with last name from `workers.PersonName.lastName`; distinguish records that share that display name but have different Workday identifiers.
            * **Interpretation:** Workday reports last name as display text for each person name; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-legalname-middlename-36c4d36bd4a1" title="Middle Name" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.legalName.middleName`

            **Middle Name.** Middle name, if any. It gives the person name a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each person name with middle name from `workers.PersonName.middleName`; distinguish records that share that display name but have different Workday identifiers.
            * **Interpretation:** Workday reports middle name as display text for each person name; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-legalname-prefix-db1f6deae88e" title="Prefix" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.legalName.prefix`

            **Prefix.** Name prefix/title (e.g., Mr., Dr.). It supplies the prefix profile facet used to reconcile or attribute the person name.

            * **Enables:** Reconcile the worker's prefix in `workers.PersonName.prefix` with its provider profile or directory identity; confirm ambiguous matches with the stable provider ID.
            * **Interpretation:** Workday reports prefix as a mutable profile or directory attribute on each person name; it may be absent, shared, or non-unique.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-legalname-suffix-926e354f9700" title="Suffix" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.legalName.suffix`

            **Suffix.** Name suffix (e.g., Jr., III). It supplies the suffix profile facet used to reconcile or attribute the person name.

            * **Enables:** Reconcile the worker's suffix in `workers.PersonName.suffix` with its provider profile or directory identity; confirm ambiguous matches with the stable provider ID.
            * **Interpretation:** Workday reports suffix as a mutable profile or directory attribute on each person name; it may be absent, shared, or non-unique.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-location-e3c74ac3618f" title="Location" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.location`

            **Location.** Primary work location of the worker. It preserves the nested context needed to interpret the parent worker.

            * **Enables:** Attribute location in `workers.location` to the parent worker; identify parent records where that nested location object is absent.
            * **Interpretation:** Workday reports location as a nested object on each worker; optional children may be absent from a valid response. This nested location attribute does not establish where data is stored or processed and is not a residency signal.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-location-descriptor-3b7a67126a19" title="Descriptor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.location.descriptor`

            **Descriptor.** Display name of the location. It supplies the provider-reported address or location facet for the location ref, not a residency determination.

            * **Enables:** Group Workers by the exact descriptor in `workers.LocationRef.descriptor` while keeping that address or location separate from geolocation and residency claims.
            * **Interpretation:** Workday reports descriptor as an address or location facet on each location ref; it does not establish verified geolocation or data residency.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-location-href-342652370da7" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.location.href`

            **Href.** API URL to the location resource. It supplies the provider-reported address or location facet for the location ref, not a residency determination.

            * **Enables:** Associate each location ref with the resource identified by href in `workers.LocationRef.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each location ref; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-location-id-a0d2a2f6967f" title="ID" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.location.id`

            **ID.** Unique identifier for the location. It provides the reference needed to connect the worker to the corresponding provider object.

            * **Enables:** Connect each location ref in Workers to the referenced location ref through `workers.LocationRef.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its location ref namespace; it is not a universal identity outside Workday.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-managementlevel-d6642150b307" title="Management Level" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.managementLevel`

            **Management Level.** Management level of the worker (e.g., Individual Contributor, Manager, Director). It preserves the nested context needed to interpret the parent worker.

            * **Enables:** Attribute management level in `workers.managementLevel` to the parent worker; identify parent records where that nested management level object is absent.
            * **Interpretation:** Workday reports management level as a nested object on each worker; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-managementlevel-descriptor-2f8da9dc6ef5" title="Descriptor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.managementLevel.descriptor`

            **Descriptor.** Display name of the management level (e.g., Individual Contributor, Manager, Director). It gives the management level ref a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `workers.ManagementLevelRef.descriptor` for each management level ref; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each management level ref; it is not a stable identity.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-managementlevel-id-ad6fac636638" title="ID" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.managementLevel.id`

            **ID.** Unique identifier for the management level. It provides the reference needed to connect the worker to the corresponding provider object.

            * **Enables:** Connect each management level ref in Workers to the referenced management level ref through `workers.ManagementLevelRef.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its management level ref namespace; it is not a universal identity outside Workday.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-originalhiredate-37f8fc5a826c" title="Original Hire Date" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.originalHireDate`

            **Original Hire Date.** The original hire date, which may differ from hire date for rehires. It anchors the worker on the provider's reported timeline.

            * **Enables:** Order Workers by original hire date in `workers.originalHireDate` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Workday reports original hire date as a calendar date on each worker; its grain is one day and no time of day should be inferred.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-paytype-219bc6e9d505" title="Pay Type" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.payType`

            **Pay Type.** Pay type such as Salaried or Hourly. It distinguishes the provider-defined pay type state or classification for the worker.

            * **Enables:** Segment worker entries in Workers by pay type in `workers.payType`; compare counts only within the same Workday taxonomy.
            * **Interpretation:** Workday reports pay type as a label from its own taxonomy on each worker; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-photo-41ea5cd12f7c" title="Photo" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.photo`

            **Photo.** URL to the worker's photo. It locates the provider resource or path associated with the worker.

            * **Enables:** Associate each worker with the resource identified by photo in `workers.photo`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports photo as a resource locator for each worker; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-position-882824f75826" title="Position" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.position`

            **Position.** The position the worker currently holds. It preserves the nested context needed to interpret the parent worker.

            * **Enables:** Attribute position in `workers.position` to the parent worker; identify parent records where that nested position object is absent.
            * **Interpretation:** Workday reports position as a nested object on each worker; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-position-descriptor-5d757adb7944" title="Descriptor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.position.descriptor`

            **Descriptor.** Display name of the position. It gives the position ref a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `workers.PositionRef.descriptor` for each position ref; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each position ref; it is not a stable identity.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-position-href-8c6e9a13958a" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.position.href`

            **Href.** API URL to the position resource. It locates the provider resource or path associated with the position ref.

            * **Enables:** Associate each position ref with the resource identified by href in `workers.PositionRef.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each position ref; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-position-id-43287854897e" title="ID" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.position.id`

            **ID.** Unique identifier for the position. It provides the reference needed to connect the worker to the corresponding provider object.

            * **Enables:** Connect each position ref in Workers to the referenced position ref through `workers.PositionRef.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its position ref namespace; it is not a universal identity outside Workday.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-preferredname-e1c709d527ac" title="Preferred Name" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.preferredName`

            **Preferred Name.** Preferred name of the worker, if different from legal name. It preserves the nested context needed to interpret the parent worker.

            * **Enables:** Attribute preferred name in `workers.preferredName` to the parent worker; identify parent records where that nested preferred name object is absent.
            * **Interpretation:** Workday reports preferred name as a nested object on each worker; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-primarysupervisor-d8e31c5b342b" title="Primary Supervisor" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.primarySupervisor`

            **Primary Supervisor.** The worker's primary supervisor/manager. It preserves the nested context needed to interpret the parent worker.

            * **Enables:** Attribute primary supervisor in `workers.primarySupervisor` to the parent worker; identify parent records where that nested primary supervisor object is absent.
            * **Interpretation:** Workday reports primary supervisor as a nested object on each worker; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-primarysupervisor-descriptor-08e283c1d9dc" title="Descriptor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.primarySupervisor.descriptor`

            **Descriptor.** Display name of the referenced worker. It gives the worker ref a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `workers.WorkerRef.descriptor` for each worker ref; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each worker ref; it is not a stable identity.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-primarysupervisor-href-ec15b8ad1286" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.primarySupervisor.href`

            **Href.** API URL to the referenced worker resource. It locates the provider resource or path associated with the worker ref.

            * **Enables:** Associate each worker ref with the resource identified by href in `workers.WorkerRef.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each worker ref; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-primarysupervisor-id-804a18805ab9" title="ID" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.primarySupervisor.id`

            **ID.** Unique Workday ID of the referenced worker. It provides the reference needed to connect the worker to the corresponding provider object.

            * **Enables:** Connect each worker ref in Workers to the referenced worker ref through `workers.WorkerRef.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its worker ref namespace; it is not a universal identity outside Workday.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-primaryworkphone-b4c837887548" title="Primary Work Phone" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.primaryWorkPhone`

            **Primary Work Phone.** Primary work phone number. It supplies the primary work phone profile facet used to reconcile or attribute the worker.

            * **Enables:** Reconcile the worker's primary work phone in `workers.primaryWorkPhone` with its provider profile or directory identity; confirm ambiguous matches with the stable provider ID.
            * **Interpretation:** Workday reports primary work phone as a mutable profile or directory attribute on each worker; it may be absent, shared, or non-unique.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-scheduledweeklyhours-1974b6361b4e" title="Scheduled Weekly Hours" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.scheduledWeeklyHours`

            **Scheduled Weekly Hours.** Scheduled weekly hours for the worker. It supplies the scheduled weekly hours measure for the worker at the provider's declared unit and grain.

            * **Enables:** Measure scheduled weekly hours through `workers.scheduledWeeklyHours` for each worker and compare only values with the same unit and record grain.
            * **Interpretation:** Workday reports scheduled weekly hours as a measure on each worker; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-supervisoryorganization-77e15de4b484" title="Supervisory Organization" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.supervisoryOrganization`

            **Supervisory Organization.** The supervisory organization the worker belongs to. It preserves the nested context needed to interpret the parent worker.

            * **Enables:** Attribute supervisory organization in `workers.supervisoryOrganization` to the parent worker; identify parent records where that nested supervisory organization object is absent.
            * **Interpretation:** Workday reports supervisory organization as a nested object on each worker; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-supervisoryorganization-descript-e53e1733ca78" title="Descriptor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.supervisoryOrganization.descriptor`

            **Descriptor.** Display name of the supervisory organization. It gives the supervisory organization ref a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `workers.SupervisoryOrganizationRef.descriptor` for each supervisory organization ref; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each supervisory organization ref; it is not a stable identity.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-supervisoryorganization-href-9c9909ff830f" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.supervisoryOrganization.href`

            **Href.** API URL to the supervisory organization resource. It locates the provider resource or path associated with the supervisory organization ref.

            * **Enables:** Associate each supervisory organization ref with the resource identified by href in `workers.SupervisoryOrganizationRef.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each supervisory organization ref; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-supervisoryorganization-id-cb146789a6dc" title="ID" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.supervisoryOrganization.id`

            **ID.** Unique identifier for the supervisory organization. It provides the reference needed to connect the worker to the corresponding provider object.

            * **Enables:** Connect each supervisory organization ref in Workers to the referenced supervisory organization ref through `workers.SupervisoryOrganizationRef.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its supervisory organization ref namespace; it is not a universal identity outside Workday.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-terminationdate-c49a8945ff95" title="Termination Date" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.terminationDate`

            **Termination Date.** The date the worker was terminated, if applicable. It anchors the worker on the provider's reported timeline.

            * **Enables:** Order Workers by termination date in `workers.terminationDate` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Workday reports termination date as a calendar date on each worker; its grain is one day and no time of day should be inferred.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-timetype-6dd7a9165427" title="Time Type" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.timeType`

            **Time Type.** Time type such as Full\_time or Part\_time. It distinguishes the provider-defined time type state or classification for the worker.

            * **Enables:** Segment worker entries in Workers by time type in `workers.timeType`; compare counts only within the same Workday taxonomy.
            * **Interpretation:** Workday reports time type as a label from its own taxonomy on each worker; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-workertype-42d142a90f1d" title="Worker Type" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.workerType`

            **Worker Type.** Whether the worker is an employee or contingent worker. It preserves the nested context needed to interpret the parent worker.

            * **Enables:** Attribute worker type in `workers.workerType` to the parent worker; identify parent records where that nested worker type object is absent.
            * **Interpretation:** Workday reports worker type as a nested object on each worker; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-workertype-descriptor-267e936babc5" title="Descriptor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `workers.workerType.descriptor`

            **Descriptor.** Display label for the worker type (e.g., Employee, Contingent Worker). It gives the worker type ref a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Display the descriptor from `workers.WorkerTypeRef.descriptor` for each worker type ref; resolve duplicate or changed labels through the provider ID rather than the text.
            * **Interpretation:** Workday supplies descriptor as mutable display text on each worker type ref; it is not a stable identity.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-workertype-href-482751c5b8f7" title="Href" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workers.workerType.href`

            **Href.** API URL to the worker type resource. It locates the provider resource or path associated with the worker type ref.

            * **Enables:** Associate each worker type ref with the resource identified by href in `workers.WorkerTypeRef.href`; verify the link resolves to the expected Workday object.
            * **Interpretation:** Workday reports href as a resource locator for each worker type ref; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-workday-workers-workertype-id-e0f698b4494a" title="ID" icon="people-group" iconType="sharp-duotone-solid">
            Developer identifier: `workers.workerType.id`

            **ID.** Unique identifier for the worker type. It provides the reference needed to connect the worker to the corresponding provider object.

            * **Enables:** Connect each worker type ref in Workers to the referenced worker type ref through `workers.WorkerTypeRef.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Workday reports ID as an identifier in its worker type ref namespace; it is not a universal identity outside Workday.
          </Accordion>
        </AccordionGroup>
      </Accordion>
    </AccordionGroup>
  </Tab>

  <Tab title="Troubleshooting">
    | Error                              | Meaning                                      | Solution                                                                            |
    | ---------------------------------- | -------------------------------------------- | ----------------------------------------------------------------------------------- |
    | `invalid_client`                   | Wrong client credentials                     | Verify Client ID and Secret; confirm **Client Credentials** grant type              |
    | `invalid_grant`                    | Client misconfigured                         | Confirm ISU is linked on the API client; confirm OAuth 2.0 is enabled on the tenant |
    | `403 Forbidden`                    | Missing functional area or domain permission | Enable all functional areas; grant GET on domains; activate security changes        |
    | `404 Not Found`                    | Wrong services host or tenant                | Verify tenant name and **Base URL** services host                                   |
    | Fields missing or null in API JSON | Domain security gap                          | Grant GET on the domain that owns that field (not an API bug)                       |

    #### Common Issues

    #### "User not authorized for this operation"

    The Integration System User's security group lacks domain GET permission for the endpoint you called. Revisit **Domain Security Policy Permissions**, add the group to the matching domain, and run **Activate Pending Security Policy Changes**.

    #### Token exchange succeeds but payroll or absence calls fail

    The API client is missing a **Scope (Functional Area)**. Edit the client and enable Payroll, Absence Management, and Time Tracking in addition to Staffing and Organizations and Roles.

    #### Connection test passes but a specific endpoint fails in sync

    Parable's connection test probes Staffing (`/workers`) only. A failure on payroll, absence, or time data means the matching Workday functional area or domain permission is still missing.

    #### Confusion about refresh tokens

    Some Workday guides describe **Manage Refresh Tokens for Integrations**. Parable uses the **client credentials** grant with client ID and secret only; no refresh token setup is required.

    **[Workday REST API](https://doc.workday.com/admin-guide/en-us/integration-administration/api-administration/rest-api/index.html)** — Official API documentation (Workday sign-in required)

    **[Workday HRIS RaaS](/plugins/provider-plugins/workday_raas)** — Custom report Provider Plugin (separate authentication)
  </Tab>
</Tabs>