Make access reviews happen when eligibility changes
A Workday eligibility change can be the small signal that prevents a much bigger access-administration task later.
Trigger
Worker Eligible Absence Type Changed
Triggers when a worker becomes eligible or ineligible for an absence type. This trigger monitors the list of eligible absence types for a specific worker and detects when new absence types are added (worker becomes eligible) or when absence types are removed (worker becomes ineligible). Uses snapshot-based diffing to compare the list of absence type IDs between polls. Note: Due to Workday security permissions, this endpoint typically only allows access to the authenticated user's own data.
Action
Add a repository collaborator
Adds a github user as a repository collaborator, or updates their permission if already a collaborator; `permission` applies to organization-owned repositories (personal ones default to 'push' and ignore this field), and an invitation may be created or permissions updated directly.
Why this helps
Access reviews happen irregularly because nobody notices the underlying worker-status change.
- Creates timely access checkpoints
- Reduces forgotten permission reviews
- Improves operational consistency
Setup
Build it in a few focused steps.
- 1Connect Workday and GitHub once.
- 2Create an automation with: “When my Workday absence-type eligibility changes, report the GitHub repositories and collaborator access that should be reviewed, then apply the approved collaborator update.”
- 3Select Worker Eligible Absence Type Changed and choose a secure run-report channel.
- 4Test with one controlled eligibility change.
Questions about this workflow
Why use a report-first instruction?
Access changes can be sensitive, so you can require a review before GitHub updates permissions.
Can this remove access too?
The supplied GitHub action updates collaborator access; specify the desired permission outcome in your instruction.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Workday to GitHub. A trigger fires from one place; an action lands in another.
Workday triggers
GitHub actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Accept a repository invitation
Accepts a pending repository invitation that has been issued to the authenticated user.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
List repositories starred by the authenticated user
Deprecated: lists repositories starred by the authenticated user, including star creation timestamps; use 'list repositories starred by the authenticated user' instead.
Absence Balance Changed
Triggers when a worker's absence balance changes. This trigger monitors a specific worker's absence plan balance and detects any changes to the balance details including quantity available, effective date, position, or other related fields. Uses snapshot-based diffing to detect meaningful changes.
List stargazers
Deprecated: lists users who have starred a repository; use `list stargazers` instead.
Balance Details Changed
Triggers when details of a specific balance change (quantity, accruals, adjustments, etc.). This trigger monitors a specific worker's absence plan balance and detects any changes to the balance details including quantity available, effective date, position, or other related fields. Uses snapshot-based diffing to detect meaningful field changes.
Star a repository for the authenticated user
Deprecated: stars a repository for the authenticated user; use `star a repository for the authenticated user` instead.
Interview Feedback Submitted or Updated
Triggers when interview feedback is submitted or updated for a specific interview. This trigger monitors a specific interview and fires when new feedback entries are detected or existing feedback is modified.
Add email for auth user
Adds one or more email addresses (which will be initially unverified) to the authenticated user's github account; use this to associate new emails, noting an email verified for another account will error, while an existing email for the current user is accepted.
Job Posting Changed
Triggers when a specific job posting's details change (title, status, posting dates, location, etc.). This trigger monitors a single job posting and fires when any of its fields are modified.
Add app access restrictions
Replaces github app access restrictions for an existing protected branch; requires a json array of app slugs in the request body, where apps must be installed and have 'contents' write permissions.
Job Posting Questionnaire Changed
Triggers when a job posting's candidate questionnaire is added or changed. This trigger monitors a specific job posting's questionnaires and detects any changes including additions, removals, or modifications to questionnaires and questions. Uses snapshot-based diffing to detect meaningful changes.
Add a repository collaborator
Adds a github user as a repository collaborator, or updates their permission if already a collaborator; `permission` applies to organization-owned repositories (personal ones default to 'push' and ignore this field), and an invitation may be created or permissions updated directly.
New Absence Balance
Triggers when a new absence balance record becomes available for a worker. This trigger monitors a specific worker's absence balances and detects when new balance records appear (e.g., a new plan/bucket becomes available). Uses snapshot-based diffing to compare balance record IDs between polls.
Add a repository to an app installation
Adds a repository to a github app installation, granting the app access; requires authenticated user to have admin rights for the repository and access to the installation.
Connect any two apps with Notis in the middle.
Workday and GitHub, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business GitHub.