---
schema_version: "1"
id: cde26ee673a6a2eb7e7222ac125af341a0f1ce00c36f2de2760bf083125e8eb4
title: Get Started with Backup & Recover for Workday
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/br_o_workday_get_started.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.br_o_workday_get_started.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 3321e1d134ef47c04e016678b6ea1d8fabe5f8a15452eaf50b535bf862e8bab1
description: Protect against data loss and facilitate restoration of your Workday data with Backup & Recover for Workday. Quickly locate specific data across your backups and identify changes between backup versions when you want to restore lost or corrupted records.
products:
  - Security
  - Salesforce Platform
release: "264"
---
# Get Started with Backup & Recover for Workday

Protect against data loss and facilitate restoration of your Workday data with Backup & Recover for Workday. Quickly locate specific data across your backups and identify changes between backup versions when you want to restore lost or corrupted records.

## Create an Integration System User

Create an integration user for Recover to interact with the data in Workday. Once created, this user provides access to the web services used by Recover.

1. Search for "Create Integration System User Task".
2. Select Create Integration System User.
3. Provide the required user details and password.
4. Uncheck “Do Not Allow UI Sessions” and select OK.

## Create an Integration System Security Group

Assign the new integration user to an integration security group.

1. In the Search field, type “Create Security Group”, and select Create Security Group.
2. On the Type of Tenanted Security Group drop down menu, select Integration System Security Group (Unconstrained).
3. Provide a name for the new Security Group and select OK.
4. On the Edit Integration System Security Group (Unconstrained) page, under Group Criteria, add the new Integrated System User.
5. Select OK.

## Assign Report Access

Add the integration group to the “Report Administrator”, "Report Field Security", "Report Access Security" user groups.

1. Open the report and select the Data Source Context\_Menu.png menu.
2. Select “View Security”.
3. Select "Edit Security Policy Permissions".
4. Add the security group in the Integration Permissions Section. Assign Get access to the group.
5. Run the Activate Pending Security Policy Changes task and approve pending security changes.
6. The integration user now has access to the reports that require exporting.
7. Report owners can share a report with the integration user, allowing the user to extract it as a Reports-as-a-Service (RaaS) web service.

## Enable Workday Query Language Domain

1. Using the Global Search, search for and select "View Domain".
2. On the View Domain modal, search for and select "Workday Query language". Click OK.
3. In the View Domain section:
    1. Select the context menu next to "Workday Query language" within the View Domain banner.
    2. Select Domain.
    3. Select Edit Security Policy Permissions.
4. In the Edit Permissions section:
    1. Under Report/Task Permissions, add the "Ownbackup ISSG WD" security group.
    2. Select the checkboxes for View and Modify.
    3. Click OK to continue.
5. In the Activate Pending Security Policy Changes section, provide a comment on the changes being made and select OK to finish the process.

### Create the API Client

To access data in a Workday environment, create an integration API client.

1. Search for and select "Register For API Client For Integration".
2. Enter the Client Name and select these for Scope (Functional Areas):
    
    - System
    - Tenant Non-Configurable
3. Select the Non-Expiring Refresh Token checkbox and Include Workday Owned Scope. Select OK.
4. Save the “Client ID” and “Client Secret”.

## Generate an API Refresh Token

Generate a refresh token so the API client remains connected to the data in Workday.

1. Select the View API Client context menu Context\_Menu\_Alt.png and select "Manage Refresh Token For Integration".
2. Add the integration user to the Workday Account column.
3. Select the Generate New Refresh Token checkbox. Select OK.
4. On the next screen, the Refresh Token specific to the integration user is displayed. Copy and save the Refresh Token.

## Create a Report Repository

A custom report must be created to act as a "Report Repository". This provides access to all reports in Workday for backup and recovery.

See [Guidelines for Creating Custom Reports in Backup & Recover for Workday](https://help.salesforce.com/s/articleView?id=platform.br_o_workday_guidelines_custom_reports.htm&release=264.0.0&type=5 "When you create custom reports in Backup & Recover for Workday, keep these points in mind.").

1. Search for and select "Register For API Client For Integration".
2. Create a custom report with these fields set to “All custom reports“:
    
    - Data\_Source
    - workdayID
    - Created\_On
    - Report\_Type
    - Report\_Owner
    - Business\_Object
    - Custom\_Report
    - Enable\_As\_Web\_Service
3. Using the Filter tab, add these conditions:
    
    - Report Type = Advanced
    - Enable As Web Service = True
4. Transfer ownership of the Report Repository to the Integration System User.