errors / soap-web-services / invalid-request-isu-domain-permission
"Invalid Request": ISU Missing Domain Permission
The error SOAP-ENV:Client.validationError: Invalid request
What it means
Despite what the message says, the request itself is probably fine. The ISU doesn't have the domain security permission for the web service operation it's calling, so Workday rejects it without explaining why.
Troubleshooting
- Find which web service operation the call uses - Get_Workers lives under Worker Data, for example.
- Run View Security for Securable Item on that operation to see which domain secures it.
- Check the ISU's security group and confirm it has Get (or Put, for writes) access on that domain in the right security policy.
- Activate pending security policy changes - a grant does nothing until you activate it.
- If it works in one tenant but not another, compare the security configs side by side.
⚡ Quick fix
Grant the ISU's security group the right domain access, activate pending security policy changes, and retry.
✓ Permanent fix
One security group per integration with documented domain grants. Add a smoke-test call to the deployment checklist so permission gaps surface before go-live, not after.
Was this helpful?