Audit WAF lists when absence eligibility changes
Keep continuity reviews attached to the staffing event that starts them.
Trigger
Worker Eligible Absence Type Changed
Triggers when a worker becomes eligible or ineligible for an absence type. This trigger monitors the list of eligible absence types for a specific worker and detects when new absence types are added (worker becomes eligible) or when absence types are removed (worker becomes ineligible). Uses snapshot-based diffing to compare the list of absence type IDs between polls. Note: Due to Workday security permissions, this endpoint typically only allows access to the authenticated user's own data.
Action
List WAF Lists
Tool to fetch all waf lists (no items) for an account. use after confirming account id.
Why this helps
Staffing changes can create access continuity work that gets lost between HR and security teams.
- Creates a repeatable continuity checkpoint
- Shows current WAF list inventory
- Keeps security review scoped to a real staffing event
Setup
Build it in a few focused steps.
- 1Connect Workday and Cloudflare once in Notis.
- 2Create an automation for absence continuity audits.
- 3Tell Notis to list WAF lists and summarize which access continuity questions require owner review.
- 4Pick Workday Worker Eligible Absence Type Changed as the trigger and choose a report channel.
- 5Test with one eligibility change.
Questions about this workflow
Does it change WAF lists automatically?
No. It inventories lists and prepares a review.
Can the prompt include a specific team?
Yes. Name the owner or escalation path in the instruction.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Workday to Cloudflare. A trigger fires from one place; an action lands in another.
Workday triggers
Cloudflare actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Create DNS record
Tool to create a new dns record within a specific zone. use after obtaining the zone id to programmatically add dns entries.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Create WAF List
Tool to create a new empty waf list for the account. use after confirming the account id. example: create list(account id="<id>", kind="ip", name="blocklist")
Absence Balance Changed
Triggers when a worker's absence balance changes. This trigger monitors a specific worker's absence plan balance and detects any changes to the balance details including quantity available, effective date, position, or other related fields. Uses snapshot-based diffing to detect meaningful changes.
Create Zone
Tool to create a new zone. use after confirming account id when adding a domain to cloudflare.
Balance Details Changed
Triggers when details of a specific balance change (quantity, accruals, adjustments, etc.). This trigger monitors a specific worker's absence plan balance and detects any changes to the balance details including quantity available, effective date, position, or other related fields. Uses snapshot-based diffing to detect meaningful field changes.
Delete DNS Record
Tool to delete a dns record within a specific zone. use after confirming zone and record ids. example: "delete dns record 372e6795... from zone 023e105f4ecef..."
Interview Feedback Submitted or Updated
Triggers when interview feedback is submitted or updated for a specific interview. This trigger monitors a specific interview and fires when new feedback entries are detected or existing feedback is modified.
Delete WAF List
Tool to delete a waf list. use when you need to remove a list after verifying no filters reference it. example: delete list(account id="<account id>", list id="<list id>")
Job Posting Changed
Triggers when a specific job posting's details change (title, status, posting dates, location, etc.). This trigger monitors a single job posting and fires when any of its fields are modified.
Delete Zone
Tool to delete a zone. use after confirming the zone identifier to permanently remove a dns zone from your cloudflare account. example: delete zone(zone identifier="023e105f4ecef8ad9ca31a8372d0c353")
Job Posting Questionnaire Changed
Triggers when a job posting's candidate questionnaire is added or changed. This trigger monitors a specific job posting's questionnaires and detects any changes including additions, removals, or modifications to questionnaires and questions. Uses snapshot-based diffing to detect meaningful changes.
List WAF Lists
Tool to fetch all waf lists (no items) for an account. use after confirming account id.
New Absence Balance
Triggers when a new absence balance record becomes available for a worker. This trigger monitors a specific worker's absence balances and detects when new balance records appear (e.g., a new plan/bucket becomes available). Uses snapshot-based diffing to compare balance record IDs between polls.
List Account Members
Tool to list members of a given cloudflare account. use after confirming the account id.
Connect any two apps with Notis in the middle.
Workday and Cloudflare, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Cloudflare.