Revoke dynamic leases after eligibility changes
End temporary secret access when absence eligibility no longer supports it.
Trigger
Worker Eligible Absence Type Changed
Triggers when a worker becomes eligible or ineligible for an absence type. This trigger monitors the list of eligible absence types for a specific worker and detects when new absence types are added (worker becomes eligible) or when absence types are removed (worker becomes ineligible). Uses snapshot-based diffing to compare the list of absence type IDs between polls. Note: Due to Workday security permissions, this endpoint typically only allows access to the authenticated user's own data.
Action
Revoke Dynamic Secret Lease
Tool to revoke a dynamic secret lease. Use when you need to invalidate an active lease by its ID after confirming the config and dynamic secret identifiers.
Why this helps
Temporary leases can remain active after HR eligibility changes.
- Reduces lingering temporary access
- Creates a prompt security response
- Makes policy enforcement repeatable
Setup
Build it in a few focused steps.
- 1Connect Workday and Doppler secretops in Notis.
- 2Create an automation naming the lease and revocation condition.
- 3Choose Worker Eligible Absence Type Changed as the trigger.
- 4Select a report channel and test with one eligibility change.
Questions about this workflow
Will every eligibility change revoke a lease?
Only when your instruction defines the affected lease and condition.
What identifiers are needed?
The config and dynamic secret identifiers required by Doppler.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Workday to Doppler secretops. A trigger fires from one place; an action lands in another.
Workday triggers
Doppler secretops actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Activity Logs List
Tool to list workplace activity logs. Use when you need to fetch recent activity logs.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Retrieve Activity Log
Tool to retrieve a single activity log entry by id. Use when you have a valid Activity Log id.
Absence Balance Changed
Triggers when a worker's absence balance changes. This trigger monitors a specific worker's absence plan balance and detects any changes to the balance details including quantity available, effective date, position, or other related fields. Uses snapshot-based diffing to detect meaningful changes.
Retrieve Config Log Entry
Tool to retrieve a specific config log entry. Use when needing details of a single config log; call after specifying project, config, and log identifiers.
Balance Details Changed
Triggers when details of a specific balance change (quantity, accruals, adjustments, etc.). This trigger monitors a specific worker's absence plan balance and detects any changes to the balance details including quantity available, effective date, position, or other related fields. Uses snapshot-based diffing to detect meaningful field changes.
Config Logs List
Tool to list config change logs for a specific config. Use when you need the audit trail for a config after confirming its identity.
Interview Feedback Submitted or Updated
Triggers when interview feedback is submitted or updated for a specific interview. This trigger monitors a specific interview and fires when new feedback entries are detected or existing feedback is modified.
Config Logs Rollback
Tool to rollback a config to a selected log version. Use when needing to undo a specific change by its log ID, after confirming project, config, and log ID.
Job Posting Changed
Triggers when a specific job posting's details change (title, status, posting dates, location, etc.). This trigger monitors a single job posting and fires when any of its fields are modified.
Clone Config
Tool to clone a branch config including all its secrets. Use after confirming the source config details.
Job Posting Questionnaire Changed
Triggers when a job posting's candidate questionnaire is added or changed. This trigger monitors a specific job posting's questionnaires and detects any changes including additions, removals, or modifications to questionnaires and questions. Uses snapshot-based diffing to detect meaningful changes.
Create Branch Config
Tool to create a branch config. Use when you need to programmatically establish a new branch-based configuration for a specified project and environment. Use after selecting the target project and environment.
New Absence Balance
Triggers when a new absence balance record becomes available for a worker. This trigger monitors a specific worker's absence balances and detects when new balance records appear (e.g., a new plan/bucket becomes available). Uses snapshot-based diffing to compare balance record IDs between polls.
Configs Delete
Tool to delete a config permanently. Use when you need to remove a config that is no longer needed.
Connect any two apps with Notis in the middle.
Workday and Doppler secretops, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Doppler secretops.