The three minimum security domain rights that must be assigned to the integration group and users to get the data necessary for the default mappings in the Workday Identity Collector are:
Person Data: ID Information
Worker Data: Public Worker Reports
Workday Accounts
The following rights are required to collect the necessary data for the default mappings in the Workday Application Collector:
Account collector
Workday Accounts
Worker Data: Public Worker Reports
Permission collector
Manage: Organization Roles
Org Designs: Assign Roles
User-Based Security Group Administration
Manager: Organization Integration