RaaS Call Returns Action Denied Because the Report Was Never Published as a Web Service
The error Action: denied
What does "RaaS Call Returns Action Denied Because the Report Was Never Published as a Web Service" mean in Workday RaaS?
Your credentials are accepted but Workday refuses to run the report. This is usually the report's own configuration rather than the account, because a custom report has to be explicitly published before any web service call can reach it.
Quick fix
Check Enable as Web Service and Enable External Access on the report definition, re-copy the URL from Web Service > View URLs, and retry.
Permanent fix
Make publishing a report as a web service an explicit checklist step rather than an assumption: Advanced report, both web service checkboxes ticked, shared with the integration account, and that account in a security group holding the report web service domain plus every domain behind the data source. Always copy the URL from View URLs instead of hand-building it.
Troubleshooting
- Separate authentication from authorization first. Wrong credentials produce an authentication failure, so a denial means the caller was identified and then refused.
- Open the custom report definition and confirm it is an Advanced report. A Simple report cannot be exposed as a web service at all.
- On the report definition, confirm both Enable as Web Service and Enable External Access are checked. Missing either one produces a denial rather than a missing report.
- Confirm the report is shared with the calling account, directly or through a security group. Owning a report is not the same as sharing it.
- Confirm the calling account holds the report web service domain and the domains behind the report's data source. A denial can come from the data source even when the report itself is published correctly.
- Rebuild the URL from Web Service > View URLs on the report rather than typing it by hand, so the owner and report name segments are exactly what Workday expects.
Was this helpful?