Two people run the same report. One person can view all columns but the other person can only view some columns. Why is the second user missing columns?

Workday's security framework operates at the field level through security domains. When a user runs a report, the system evaluates their security profile against the domains that secure each field (column) in the report definition. If the user does not have the necessary permissions for a specific domain, Workday automatically hides the corresponding column(s) from their report output. Therefore, the discrepancy in visible columns between the two users directly indicates that the second user lacks security access to the domain(s) governing the missing fields.

A. The second user is not the report owner. Report ownership grants permissions to edit or delete the report definition, not to control data visibility for other users who run the report.
B. The report uses an indexed data source. The type of data source (indexed or standard) does not determine column visibility. Access to fields from any data source is governed by domain security.
D. The first user did not manually share the report with the second user. Sharing determines who can find and run the report. Since the second user can run the report, it has already been shared with them; this does not affect which columns they can see.

1. Workday Official Documentation, "Custom Reports Reference": In the section on "Report Data Source Security," it is detailed that a user's security group membership determines their access to the domains that secure the data source and its fields. The documentation states, "When a user runs a report, they see only the data that their security group membership gives them access to." This principle extends to individual fields (columns). If a user lacks access to a domain securing a field, that field will not appear in their output. (Accessed via Workday Community).

2. Workday Official Documentation, "Security Administration": The "Domains" section explains that domains are collections of related securable items, including report fields. Access to these items is granted through security policies attached to the domain. This documentation confirms that if a user is not part of a security group with access to a specific domain, they cannot view the report fields secured by it. (Accessed via Workday Community).