How can a user become a member of an organization-based security group? (Select two correct answers.)

Organization-based security groups in Workday dynamically assign membership based on a worker's assignment to a specific organization or its subordinates within a hierarchy. A user assigned to a cost center that is part of the "Information Technology cost center hierarchy" or a location that falls under the "Europe Location Hierarchy" will automatically be included in a security group that is configured for those respective hierarchies. These hierarchies are standard Workday organization types used for security assignments.

A. The user is located in London, Paris, and Rome. A worker is typically assigned to a single primary location per position. This option is less precise and functionally different from being part of a defined hierarchy.
D. The user is a member of the Human Resources job family. A job family is a job profile attribute, not an organization type. Security groups based on job families are typically role-based or attribute-based, not organization-based.

1. Workday Documentation, "Set Up Organization-Based Security Groups": This guide explicitly states that organization-based security groups include workers based on their membership in specified organizations. It details the process of selecting an organization type (e.g., Cost Center, Location) and an allowed organization, with the option to "Include Subordinate Organizations," which leverages hierarchies. This directly supports that membership in a Cost Center Hierarchy or Location Hierarchy grants access. (Reference: Workday Security Administration Guide, Chapter on Security Groups, Section: "Organization-Based Security Groups").

2. Workday Documentation, "Core Concepts: Organizations": This document defines the foundational organization types in Workday, including Cost Centers and Locations, and explains how they can be structured into hierarchies for reporting and security purposes. It clarifies that a worker's organizational assignments are the basis for membership in organization-based security groups. (Reference: Workday HCM Core Concepts Guide, Chapter: "Organizations in Workday").

3. Workday Documentation, "Security Group Types": This resource differentiates between security group types. It defines organization-based groups by their link to organization membership, contrasting them with role-based groups (assigned to positions/jobs) and attribute-based groups (which could be based on job family, but are not "organization-based"). This confirms why job family is an incorrect basis for this specific group type. (Reference: Workday Security Administration Guide, Chapter on Security Groups, Section: "Overview of Security Group Types").