pre-repos/workday_monthly_admin_activities_audit/event_logs.txt

=== Dennis Cregan ===

[EVT-0001] - On January 6, 2026 at 6:51 AM EST, Workday administrator Dennis Cregan edited the account for user Casey Spelman. The edit set Casey’s account expiration date to January 6, 2026 (the prior date was August 7, 2025). The transaction also configured a large number of notification settings for Casey. For each category listed – such as Academic Advising, Accounting Center Job Process, Activity Comments, Ad Hoc Worker Communications, Add employee to Comp Process, Admissions, Anniversaries, Background Error Notifications, Benefits Notifications, Birthdays, Bonus/Comp/Stock/Merit review, Business Process General Notifications, Calculate and Assign ABC Classification, Check‑Ins, Consignment Usage Requisitions Notification, Create Inventory Waves, Customer Central, Drive Access Additions/Changes/Removals, E&G Committee Invitation, Evidence of Insurance, Extended Enterprise Campaigns, Financial Aid (Disbursements, General, Packages), General Notifications, Give Feedback, Goal Notes, Integrations, Interview Schedule Communications, Inventory (Average Daily Usage, Count Notification, Preferred Supplier Lead Time, Replenishment), Learning Campaigns/Expiration Periods, Manage Individual Benefit Rates, Marketplace Opportunity Promotion, Metric Review Notification, Onboarding Plan Notifications/Setup, Open Enrollment for Benefits, Par (Average Daily Usage, Lead Time, Recommended Reorder Point), Passive Enrollment Event, Prism Data Acquisition/Workbook Complete Notification, Remote Form I‑9 Authorized Representative Notification, Repository Document, Request for Quote Notifications, Review Supplier Synchronization Errors, Schedule Distribution (Request Time Off/Absence, Review Time Off), Scheduled Future Processes, Scheduled Live Report Completion, Scheduled Report Completion, Share Career Development Opportunity/Path Notification Category, Share notifications, Student Engagement Monitoring, Student Financials, Student Records, Student Recruiting (Marketing/Transactional), Supplier Contract Expiration/Renewals, Surveys, System Monitor Notifications, Talent Pool Notifications, Time Off, Upcoming Shift, Voluntary Self‑Identification of Disability, Workbook (Access Additions/Removals, Comments, Conversations, Import Failures/Successes, Live Data Scheduled Updates, Notify If Function Notifications, Tasks), Worker Communications, and the custom “~Gigs~” category – Casey was set to receive both Email and Mobile Push notifications. The transaction also recorded a 30‑day grace period for login count, set the session timeout to 2 minutes, and marked the event as completed. All of these changes were applied in a single “Edit Workday Account” transaction executed by Dennis Cregan.

[EVT-0002] - On January 6, 2026 at 9:40 AM EST, Workday administrator **Dennis Cregan** (user ID 1000054) edited the record for student **Eva DNU Silva‑Ewan**.   He changed her **Universal ID** from the old value **“1115670”** to a new, prefixed value **“DNU1115670.”**   The change was made as part of an “Edit Universal Id” transaction and was recorded in the system’s audit log. No other attributes were altered, and no attachments or deletions occurred during this transaction. The event was logged under event ID EVT‑0002 and involved nine rows of data being processed.

[EVT-0003] - On January 7, 2026 at 7:43 AM EST a Workday background job called **“Student Prospect Update Event (Default Definition)”** was started. The job ran a batch that matched student records and updated the prospect record for **Foluso Adeluola**.  During this process, an administrator named **Dennis Cregan (user ID 1000054)** performed the action “Edit Other IDs” on Foluso’s record. The edit added a new identifier value **“0306632”** (and associated values “495870520” and “647589765”) to the student’s list of identifiers. The change also updated the **Academic Record Locked** flag from “Y” to “Y” (no change in that field) and set the **Event Record Moment** to 2026‑01‑07 04:43:36.377 –0800.  The job logged the addition of these identifiers and marked the event as “Successfully Completed.” No other user or admin performed any changes to this record during that transaction. The audit shows the entire batch process, including initiation, approval by an integration administrator, and completion of the student prospect update.

[EVT-0004] - On January 7, 2026 at 07:44 AM EST, Workday’s integration administrator (user ID 1000054, Dennis Cregan) launched a background batch job called **“Student Prospect Update Event (Default Definition)”**. The job ran the second step of that workflow, which is a batch/job process named **“Match Students.”**  During the job, Workday created a new custom identifier for the student prospect **Kyra Dinkins**. The identifier value was **0311503**, and it was added to Kyra’s record as a new “Other ID” (the field is called **“Edit Other IDs”).** The identifier was also linked to the existing identifiers **985663412** and **994089969**, so Kyra now has three IDs in her record.  The job updated several attributes of Kyra’s prospect record, including the creation date (set to 2026‑01‑07 00:00:00) and the event record moment (set to 2026‑01‑07 04:44:05). The event was marked as “Y” for the **Last Updated for Find Duplicate Persons Job** flag, indicating that the system had processed her record in a duplicate‑search routine.  No attachments were added or removed. The only removal noted was the old string “0311503 985663412 994089969” from a prior field value, which was replaced by the new single identifier “0311503.” The transaction was logged under the event ID **EVT‑0004** and involved 86 rows of audit data.

[EVT-0005] - On January 7, 2026 at 8:08 AM EST, Workday administrator Dennis Cregan edited the Universal ID for employee Sarah Little. The change updated her Student Universal ID from **1117191** to **1117192** and recorded the entry moment as “2026 01 07 05 08 42 607 ‑0800.” The edit was performed as part of the “Edit Universal Id” transaction and applied to Sarah Little’s record (Gallaudet University – ASL Connect – General). The audit log shows the new value, the prior value, and that the XML file contents were excluded from the audit. No attachments were added or removed during this transaction.

[EVT-0006] - On January 7, 2026 at 8:09 AM Eastern Standard Time, Workday administrator **Dennis Cregan** (user ID 1000054) edited the student record for **Sarah Little**.   The edit changed Sarah’s **Student ID** from **1117191** to **1117192** and updated the record’s “Entry Moment” timestamp to reflect the change.   The action was performed as part of an **Edit Student ID** transaction and was logged under event EVT‑0006. No other fields were added or removed, and no attachments were involved. The change was recorded in the “Student Financials Period Record Student ID (Denormalized)” field.

[EVT-0007] - On January 7, 2026 at 8:09 AM EST, Workday administrator Dennis Cregan edited the account for user Sarah Little. During that transaction, he added a large number of notification categories to Sarah’s User Notification Settings – essentially enabling almost every available email and mobile‑push alert that Workday can send. The changes were applied to Sarah’s account (ID 1117192, previously 1117191) and included categories such as Academic Advising, Accounting Center Job Process, Activity Comments, Ad Hoc Worker Communications, Add employee to Comp Process, Admissions, Anniversaries, Background Error Notifications, Benefits Notifications, Birthdays, Bonus/Comp/Stock reviews, Business Process General Notifications, Check‑Ins, Consignment Usage Requisitions Notification, Create Inventory Waves, Customer Central, Drive Access Additions/Changes/Removals, E&G Committee Invitation, Evidence of Insurance, Extended Enterprise Campaigns, Financial Aid (Disbursements/General/Packages), General Notifications, Give Feedback, Goal Notes, Integrations, Interview Schedule Communications, Inventory metrics (Average Daily Usage, Count Notification, Preferred Supplier Lead Time, Replenishment), Learning Campaigns and Expiration Periods, Manage Individual Benefit Rates, Marketplace Opportunity Promotion, Metric Review Notification, Onboarding Plan Notifications and Setup, Open Enrollment for Benefits, Par metrics (Average Daily Usage, Lead Time, Recommended Reorder Point), Passive Enrollment Event, Prism Data Acquisition and Wbucket Complete notifications, Remote Form I‑9 Authorized Representative notifications, Repository Document, Request for Quote Notifications, Review Supplier Synchronization Errors, Scheduled Future Processes, Schedule Distribution (Request Time Off/Review Time Off), Scheduled Live Report Completion, Scheduled Report Completion, Share Career Development Opportunity and Path notifications, Share notifications, Student Engagement Monitoring, Student Financials, Student Records, Student Recruiting (Marketing/Transactional), Supplier Contract Expiration/Renewals, Surveys, System Monitor Notifications, Talent Pool Notifications, Time Off, Upcoming Shift, Voluntary Self‑Identification of Disability, Workbook Access Additions/Removals, Workbook Comments/Conversations, Workbook Import Failures/Successes, Workbook Live Data Scheduled Updates, Workbook Notify If Function Notifications, Workbook Tasks, Worker Communications, and the custom “~Gigs~” category. All of these were configured to send both email and mobile‑push alerts (where applicable). The transaction was completed successfully, with no removals or attachments added.

[EVT-0008] - On January 7, 2026 at 1:03 PM EST (10:03 AM PST), Dennis Cregan edited the security segment for an integration system in Workday. He added a new “Edit Integration System Security Segment” task and associated it with the integration system named **ISSS Financial Aid Integrations**. Within that segment, he added two outbound package integrations: **SINT100 Slate Financial Aid Packages Outbound** and **SINT100b Slate Financial Aid Packages FSFSA Outbound**. The audit record shows the new entry time and notes that XML file contents were excluded from the log. No other changes, deletions, or attachments were recorded. The event was logged under event ID EVT‑0008 and involved five rows of data.

[EVT-0009] - On January 8, 2026 at 3:25 PM EST, Workday administrator Dennis Cregan created a new Universal Identifier for employee Phillip Hight. The identifier value was **1117202** and the entry moment recorded was 2026‑01‑08 12:25:07.858 –0800 (the time zone offset). The action added the “Create Universal Id” transaction to Phillip Hight’s record, linking the new Universal Identifier to his person profile. No values were removed or changed; this was a straightforward creation of the new ID for Phillip Hight. The event is logged as EVT‑0009 and involved seven audit rows.

[EVT-0010] - On January 8, 2026 at 3:26 PM EST, Workday administrator Dennis Cregan edited the account for user Phillip Hight. During that transaction, he enabled a large number of notification categories for Phillip’s user profile. The changes added email and mobile‑push notifications for every listed event type—such as Academic Advising, Accounting Center Job Process, Activity Comments, Ad Hoc Worker Communications, Add employee to Comp Process, Admissions, Anniversaries, Background Error Notifications, Benefits Notifications, Birthdays, Bonus/Comp/Stock reviews, Business Process General Notifications, Check‑Ins, Consignment Usage Requisitions, Create Inventory Waves, Customer Central, Drive Access changes, E&G Committee Invitations, Evidence of Insurance, Extended Enterprise Campaigns, various Financial Aid notifications, General Notifications, Give Feedback, Goal Notes, Integrations, Interview Schedule Communications, Inventory usage and replenishment alerts, Learning Campaigns, Management of Benefit Rates, Marketplace Opportunity Promotion, Metric Review Notifications, Onboarding Plan and Setup alerts, Open Enrollment for Benefits, Par usage alerts, Passive Enrollment Events, Prism Data Acquisition, Remote Form I‑9 notifications, Repository Document updates, Request for Quote alerts, Supplier Synchronization errors, Schedule Distribution for time off requests and reviews, Scheduled Future Processes, Report completions, Share Career Development opportunities, Student Engagement Monitoring, Student Financials and Records, Student Recruiting notifications, Supplier Contract expirations/renewals, Surveys, System Monitor alerts, Talent Pool notifications, Time Off and Upcoming Shift alerts, Voluntary Self‑Identification of Disability, Workbook access changes, comments, conversations, import failures/successes, live data updates, and many other categories. All of these were configured to send both email and mobile‑push notifications (where applicable). The transaction was completed successfully, with the new settings applied to Phillip Hight’s user notification profile.

[EVT-0011] - On January 8, 2026 at 3:26 PM EST, Workday administrator **Dennis Cregan** (user ID 1000054) edited the student record for **Phillip Hight**.   The change was made in the “Edit Student ID” transaction and replaced Phillip’s temporary student identifier **TEMP_STUDENT_0002670** with the new permanent ID **1117202**.   The edit was recorded as part of Phillip Hight’s application for a Visiting Consortium Student Non‑degree status for the Fall 2026, Spring 2026 and Summer 2026 terms. The audit log shows the new ID value, the timestamp of the change, and that no attachments were added or removed. The event was logged under event ID EVT‑0011 with eight rows of detail captured in the audit.

[EVT-0012] - On January 8, 2026 at 3:47 PM EST (15:47 UTC‑08:00), Workday administrator Dennis Cregan performed an edit‑permissions transaction. He removed the “Self‑Service: Dining Dollar (diningDollar_wspzsl)” permission and the “Student as Self” role from a user, along with the associated view‑only access for that self‑service. At the same time he added the “Edit Permissions” capability and re‑granted the “Self‑Service: Dining Dollar (diningDollar_wspzsl)” permission to that user. The change was logged under event ID EVT‑0012 and involved seven rows of security policy relationships. The audit record shows the new permission timestamp (2026‑01‑08 12:47:01.568 -0800) and notes that the XML file contents were excluded from the audit.

[EVT-0013] - On January 8, 2026 at 3:48 PM (EST) user **Dennis Cregan** approved a pending security policy change for the “Self‑Service: Dining Dollar (diningDollar_wspzsl)” domain. The approval added a new entry timestamp of 12:47 PM and an evaluation timestamp of 12:48 PM (both in the –0800 time zone). The change removed the “Student as Self” security group from that domain, temporarily revoking access to the Dining Dollar application until a new version is promoted to production (change reference CHG0037158). The action was recorded under the transaction “Activate Pending Security Policy Changes” and marked as approved. No other users or groups were affected by this specific change.

[EVT-0014] - On January 8, 2026 at 4:00 PM EST (16:00:58.749 UTC), Workday administrator Dennis Cregan (user ID 1000054) executed a transaction to activate pending security policy changes. During that transaction, the system removed the “Student as Self” security group from the Self‑Service: Dining Dollar application (security domain diningDollar_wspzsl). This action was taken to revoke the group’s access to the app until a new version is promoted to production (change request CHG0037158). The removal was recorded as part of the “Activate Pending Security Policy Changes” task, and the event is logged under EVT‑0014. No other changes or attachments were recorded in this audit entry.

[EVT-0015] - On January 9, 2026 at 12:48 PM (EST) the Workday system recorded that administrator **Dennis Cregan** created a new *Universal ID* for the student **Jr. Kang** (applying to Gallaudet University as an Undeclared major). The new Universal ID value was **1117211**. This action added the identifier to Jr. Kang’s person record and linked it to the student’s application for the Fall 2026, Spring 2027–2029 and Summer 2026–2028 terms. No attributes were removed, and the transaction was logged as “Create Universal Id” with event ID EVT‑0015. The change affected 28 rows in the audit log, reflecting the various term and status fields updated for the new identifier.

[EVT-0016] - On January 9, 2026 at 12:49 PM (EST) the Workday administrator **Dennis Cregan** edited the account of user **Jr. Kang** (user ID 1117211).   During that single “Edit Workday Account” transaction, Dennis added a large set of notification preferences for Jr. Kang. The changes enabled email and, in many cases, mobile‑push notifications for dozens of Workday business processes and events—such as Academic Advising, Accounting Center Job Process, Activity Comments, Ad Hoc Worker Communications, Add employee to Comp Process, Admissions, Anniversaries, Background Error Notifications, Benefits Notifications, Birthdays, Bonus/Comp/Stock reviews, Business Process General notifications, Check‑Ins, Inventory alerts, Learning Campaigns, Onboarding events, Open Enrollment for Benefits, Par usage alerts, Passive Enrollment Events, Prism data acquisition, Remote Form I‑9 authorizations, Repository Documents, Request for Quote notifications, Scheduled Reports, Share Career Development opportunities, Student Financials and Records, Supplier Contract expirations/renewals, Surveys, System Monitor alerts, Talent Pool notifications, Time Off, Upcoming Shift, Voluntary Self‑Identification of Disability, Workbook events, and many others.    All of these notification categories were configured to send email; for most of them, mobile‑push notifications were also enabled. No preferences were removed or changed to a different setting—only new notification channels were added for Jr. Kang’s account. The transaction was completed successfully at 12:49:22.581 PM EST.

[EVT-0017] - On January 9, 2026 at 12:49 PM Eastern Standard Time, Workday administrator Dennis Cregan (user ID 1000054) edited the Student ID for a student record. The original temporary ID “TEMP_STUDENT_0002621” was replaced with the new permanent ID “1117211”. The change was made as part of an “Edit Student ID” transaction that affected 56 rows in the system. The update was recorded under event EVT‑0017 and applied to the student “Jr. Kang” (who is applying for an undeclared major at Gallaudet University). No attachments were added or removed, and the XML file contents were excluded from the audit log.

[EVT-0018] - On January 16, 2026 at 5:40 AM EST, Workday administrator Dennis Cregan edited the account for user Dale Shepard. The edit changed Dale’s personal preferences and, most notably, added a large number of notification categories to his User Notification Settings.    The changes enabled Dale to receive email and mobile‑push alerts for dozens of business processes, including academic advising, accounting job processing, activity comments, hiring communications, benefits notifications, birthdays, performance reviews, inventory updates, learning campaigns, onboarding events, time‑off requests, and many other system alerts.    The transaction was completed successfully, with the new settings taking effect immediately for Dale Shepard’s account.

[EVT-0019] - On January 17, 2026 at 6:18 AM Eastern Standard Time, Workday administrator Dennis Cregan (user ID 1000054) added a new self‑service permission set called “Dining Dollar (diningDollar_wspzsl)” to the security role “Student as Self.” The change created a view‑only access level for that permission set, allowing students to see the Dining Dollar feature but not modify it. The audit records show that the permission was added as part of an “Edit Permissions” transaction, and the new entry time stamp was recorded in Pacific Time (2026‑01‑17 03:18:58.064 -0800). No previous values were replaced, and no items were removed. The event was logged under event ID EVT‑0019 with seven related relationship entries describing how the new permission grants access to various security policies and groups.

[EVT-0020] - On January 17, 2026 at 6:19 AM EST (Pacific time 3:19 AM), Workday administrator Dennis Cregan added a new security group called **“ISSG Dining Dollar Extend.”**   He also granted this group the following permissions:  * Access to the **“Reports: Student Financial Account”** report.   * A “View Only” permission for that report, meaning members can only read the data.    These permissions were applied through a **Maintain Permissions for Security Group** transaction, which updated the domain security policy to grant the new group access to the report and its view‑only rights. No permissions were removed, and no attachments were added. The event is recorded as EVT‑0020 with seven related changes logged.

[EVT-0021] - On January 17, 2026 at 06:21 AM EST, Workday administrator Dennis Cregan activated pending security policy changes for the Gallaudet tenant. The activation added two new view‑only permissions:  1. The “ISSG Dining Dollar Extend” security group was granted view‑only access to the **Reports: Student Financial Account** domain.   2. The “Student as Self” role was granted view‑only access to the **Self‑Service: Dining Dollar (diningDollar_wspzsl)** domain.  These changes were recorded in the audit log with comment code CHG0037161. The activation timestamp was 2026‑01‑17 03:20:09 -0800, and the entry moment was 2026‑01‑17 03:21:51 -0800. The log shows the transaction “Activate Pending Security Policy Changes” was processed, and the security timestamps for tenant setup were updated accordingly. No other attributes or relationships were modified.

[EVT-0022] - On January 17, 2026 at 6:45 AM EST, Workday administrator Dennis Cregan edited the account for user Kelby Brick. During that transaction, he added a large number of notification categories to Kelby’s user notification settings—over 200 different event types such as “Academic Advising,” “Benefits Notifications,” “Birthdays,” “Time Off,” and many others. Each of these categories was configured to send notifications via Email, and for most of them also via Mobile Push Notification. The change was recorded as a single “Edit Workday Account” transaction that completed successfully at 6:45 AM. No notifications were removed; only new notification settings were added to Kelby’s account.

[EVT-0023] - On January 17, 2026 at 6:56 AM Eastern Standard Time, Workday administrator Dennis Cregan (user ID 1000054) edited the Universal ID for student Gabrielle Vidmar. The change replaced her previous Student Universal ID “1117251” with the new value “1117249”. The edit was performed as part of an “Edit Universal Id” transaction and updated the student’s record in several related tables (Academic Record, Program of Study indexes, etc.). No other attributes were modified and no attachments or removals occurred. The event was logged under ID EVT‑0023 with 14 rows affected.

[EVT-0024] - On January 17, 2026 at 6:57 AM EST, Workday administrator Dennis Cregan (user ID 1000054) edited the Student ID for Gabrielle Vidmar. The change replaced the old Student ID 1117251 with a new value of 1117249. The edit was recorded as the “Edit Student ID” transaction and applied to Gabrielle Vidmar’s Fall 2026, Spring 2026, Summer 2026 and other related enrollment records. The audit shows the entry moment timestamp (2026‑01‑17 03:57:28 -0800) and notes that the XML file contents were excluded from the audit. No other attributes or attachments were added or removed, and the event is logged under event ID EVT‑0024.

[EVT-0025] - On January 17, 2026 at 6:58 AM EST, Workday administrator Dennis Cregan edited the account for user Gabrielle Vidmar. In that transaction he added a large set of notification categories to her User Notification Settings, enabling Gabrielle to receive email and mobile‑push alerts for a wide range of business processes (e.g., Academic Advising, Benefits Notifications, Time‑Off requests, Inventory updates, Student records, etc.). The change was recorded as a single “Edit Workday Account” transaction that completed successfully.

[EVT-0026] - On January 21, 2026 at 12:18 PM (EST) the system recorded that a background process was launched to update student prospect records. The event, called “Student Prospect Update Event (Default Definition)”, ran a batch job named “Match Students” to reconcile student identifiers.  The change was made by Workday Integration Administrator Dennis Cregan (user ID 1000054). He edited the “Other IDs” for a student prospect named **Jaycob Sink**. The edit added a new custom identifier reference (CUSTOM_IDENTIFIER_REFERENCE‑3‑21093) and updated the creation date to 2026‑01‑21. The prior creation date was 2026‑01‑20 18:01:34.  The process also marked the student prospect as “In Progress” and later “Successfully Completed”. No attachments were added, and no records were removed except the temporary reconciliation flag.  In short: Dennis Cregan triggered an automated batch job that updated Jaycob Sink’s student prospect record, adding a new identifier and marking the update as completed.

[EVT-0027] - On January 23, 2026 at 8:25 AM EST, Workday administrator Dennis Cregan edited the account for employee Emily Wolski. During that transaction he added a large number of notification categories to her user‑notification settings, enabling Emily to receive email and mobile push alerts for events such as academic advising, benefits updates, time‑off requests, onboarding activities, inventory notifications, student records, and many other business process events. The changes were applied to Emily’s account as part of the “Edit Workday Account” transaction, which was completed successfully.

[EVT-0028] - On January 23, 2026 at 10:59 AM Eastern Standard Time, Workday administrator Dennis Cregan created a new security group called **“Gallaudet and Clerc HR – UBSG.”** The group was assigned the internal ID **USER‑BASED_SECURITY_GROUP‑3‑237** and its creation timestamp was recorded as 2026‑01‑23 07:59:56.571 –0800 (UTC‑8). No prior values existed because this was a new object. The event, identified as EVT‑0028, logged the creation transaction and noted that the user’s language preference was English (United States). No attributes were removed or changed, and no attachments were added. The action was performed by Dennis Cregan (user ID 1000054) as a Workday admin.

[EVT-0029] - On January 23, 2026 at 11:02 AM EST, Workday administrator Dennis Cregan edited the “Gallaudet and Clerc HR – UBSG” user‑based security group. He added a comment to the group that reads: “This security group will be used by intersection security groups to exclude Gallaudet and Clerc HR employees when they have specific role(s), such as Manager or UI.” The change was recorded in the audit log with event ID EVT‑0029. No users were added or removed from the group; only the comment field was updated. The transaction was processed as an “Edit User‑Based Security Group” action, and the new comment value was stored in the system.

[EVT-0030] - On January 23, 2026 at 11:04 AM (EST) an administrator named Dennis Cregan added seven users to the “Gallaudet and Clerc HR – UBSG” user‑based security group. The users added were:  - Anthony Balogh   - Becky Whittington   - Christina Shen‑Austin (appears as “Christina Shen” in the applied list)   - Rachel Parker   - Yunhe Bai   - Ololade Olasanoye   - Kelly Fournier   - Stephanie Bettencourt    The action was recorded as an “Assign Users to User‑Based Security Group” transaction, with the event type “User‑Based Group Change.” The change took effect immediately (effective date 2026‑01‑23 00:00:00 -0800) and was logged in the system’s audit trail. No users were removed, and no attachments were added. The event ID for this change was EVT‑0030.

[EVT-0031] - On January 23, 2026 at 11:04 AM Eastern Standard Time, user **Dennis Cregan** (employee ID 1000054) created a new security group in Workday. The group was named **“Non‑HR Manager – ISG”** and received the internal ID **INTERSECTION_SECURITY_GROUP-3-21**. The creation event recorded the entry moment as 2026‑01‑23 08:04:33.219 –0800 (Pacific Time). No prior values existed because this was a new object, and the XML definition of the group was not included in the audit log. The action was logged under event ID EVT‑0031 and involved adding the group to the system with English (United States) as the user language. No relationships were removed or modified; only the new group was added.

[EVT-0032] - On January 23, 2026 at 11:05 AM EST (08:05 AM PST), Dennis Cregan edited an intersection security group in Workday. He created a new intersection called “Gallaudet and Clerc HR – UBSG” that excludes employees who have the Manager role from the “Non‑HR Manager – ISG” security group. The change added a comment describing the purpose of the intersection and recorded the timestamp in UTC‑8 format. No other attributes were changed, and no items were removed. The event was logged under EVT‑0032.

[EVT-0033] - On January 23, 2026 at 11:05:58 AM Eastern Standard Time, a Workday administrator named Dennis Cregan (user ID 1000054) created a new security group called **“Non‑HR Unit Initiator – ISG.”** The group was given the internal ID **INTERSECTION_SECURITY_GROUP‑3‑22** and its creation timestamp was recorded as 2026‑01‑23 08:05:58.226 –0800 (Pacific Time). The action was logged under event ID EVT‑0033, and the user’s language setting for the transaction was English (United States). No prior values existed because this was a new object, and no items were removed or attached during the transaction.

[EVT-0034] - On January 23, 2026 at 11:06 AM Eastern Standard Time, Workday administrator Dennis Cregan (user ID 1000054) edited an intersection security group. He added the “Gallaudet and Clerc HR – UBSG” security group, the “Non‑HR Unit Initiator – ISG” security group, and the role “Unit Initiator” to this intersection. The change was recorded as a new comment: “This intersection security group is used to exclude all Gallaudet and HR employees with the Unit Initiator role.” The edit also updated the group’s XML definition (the file contents were excluded from audit). No items were removed. The transaction was logged under event ID EVT‑0034 and involved six related relationship changes that set the security group to exclude the specified tenanted groups.

[EVT-0035] - On January 26, 2026 at 6:35 AM Eastern Standard Time, Workday administrator Dennis Cregan (user ID 1000054) edited the Universal ID for employee Andrew Greenman. The change replaced Andrew’s previous Universal ID of 1117188 with a new value of 1108237. The audit log records the transaction as “Edit Universal Id” and shows that the entry moment was recorded as 2026‑01‑26 03:35:36.432 –0800 (Pacific Time). No attachments were added or removed, and the change was processed as part of a standard transaction. The event is identified by EVT‑0035 and involves three attributes: Entry Moment, Universal ID, and XML (file contents excluded from the audit).

[EVT-0036] - On January 26, 2026 at 6:36 AM EST, Workday administrator Dennis Cregan edited the account for user Andrew Greenman. During that transaction, he added a large number of notification categories to Andrew’s user profile—over 500 individual settings. These include email and mobile‑push notifications for events such as Academic Advising, Accounting Center Job Process, Activity Comments, Ad Hoc Worker Communications, Add Employee to Compensation Process, Admissions, Anniversaries, Background Error Notifications, Benefits Notifications, Birthdays, Bonus/Compensation reviews, Business Process General notifications, Check‑Ins, Consignment Usage Requisitions, Create Inventory Waves, Customer Central, Drive Access changes, E&G Committee invitations, Evidence of Insurance, Extended Enterprise Campaigns, various Financial Aid notifications, General Notifications, Give Feedback, Goal Notes, Integrations, Interview Schedule Communications, Inventory usage and replenishment alerts, Learning Campaigns, Management of Individual Benefit Rates, Marketplace Opportunity Promotion, Metric Review notifications, Onboarding Plan and Setup alerts, Open Enrollment for Benefits, Par usage alerts, Passive Enrollment events, Prism data acquisition, Remote Form I‑9 notifications, Repository Document updates, Request for Quote alerts, Supplier synchronization errors, Schedule Distribution (time‑off requests and reviews), Scheduled Future Processes, Report completions, Share Career Development/Path notifications, Student Engagement Monitoring, Student Financials and Records, Student Recruiting communications, Supplier Contract expirations/renewals, Surveys, System Monitor notifications, Talent Pool alerts, Time Off and Upcoming Shift alerts, Voluntary Self‑Identification of Disability, Workbook access changes, comments, conversations, imports, live data updates, and worker communications. All of these were configured to send either email or mobile‑push notifications (or both) to Andrew Greenman. The transaction was completed successfully at 6:36 AM EST.

[EVT-0037] - On January 28, 2026 at 10:15 AM (EST) Dennis Cregan started a background process called **“Student Prospect Update Event (Default Definition)”** for the student prospect **Mark Killian**. The process was launched as part of the **“Edit Other IDs”** workflow, which is used to add or change identifiers for a student.  During the run:  * A new **Custom Identifier Reference** (ID 3‑21213) was created and linked to Mark Killian’s record.   * The system added the identifier value **681374436** to Mark Killian’s profile.   * The workflow moved through its standard steps: initiation, approval by an Integration Administrator, and a batch job that performs the **“Match Students”** operation.   * The match job ran on January 30, 2026 and marked the record as **“Unmatched”** (no existing student matched).   * The event logged that the record was **“Successfully Completed”** and the transaction was marked **“In Progress”** during processing.  The audit shows that Dennis Cregan performed the action, and the changes were applied to Mark Killian’s student prospect record. No attachments were added or removed, and the only removal noted was a previous identifier reference that was replaced by the new one. The entire transaction involved 69 rows of data changes, all captured in the Workday audit log.

[EVT-0038] - On January 28, 2026 at 2:06 PM EST, Workday administrator Dennis Cregan edited the account for user Stephanie Baran. The edit updated her account expiration date from January 11, 2024 to January 28, 2026 and set a new “Grace Period Login Count” of 30 days. In addition, Dennis configured Stephanie’s notification settings to receive email and mobile‑push alerts for a wide range of Workday events—everything from academic advising, benefits notifications, and time‑off requests to inventory updates, student records, surveys, and system monitor alerts. All of these notification categories were added to Stephanie’s user profile during the same transaction, which was logged as event EVT‑0038.

=== Joseph DeSiervi ===

[EVT-0040] - On January 8, 2026 at 3:46 PM Eastern Standard Time, Joseph DeSiervi (user ID 1003153) performed an administrative action in Workday. He edited a Business Process Security Policy and added the “Approve” permission to that policy for the role “Procurement Data Entry Specialist.” The change was recorded as event EVT‑0040. The new entry time for the policy was set to 12:46 PM Pacific Time (2026‑01‑08 12:46:39.163 -0800). The XML file contents of the policy were excluded from the audit log, so only the timestamp and the fact that the “Approve” permission was added are visible. No other attributes were changed or removed, and no attachments were added. The action was completed by Joseph DeSiervi as an administrator.

[EVT-0041] - On January 8, 2026 at 3:48 PM (EST) Joseph DeSiervi performed an administrative action in Workday. He activated a pending security‑policy change that added the “Procurement Data Entry Specialist” role the ability to approve any purchase‑order change orders (the change is referenced as INC0164817/CHG0037156). The activation was logged under the task “Activate Pending Security Policy Changes” and applied to the tenant named “gallaudet.” The event was recorded as EVT‑0041. No other attributes were changed, and no attachments or additional relationships were added beyond the security‑policy activation.

=== Julie Longson ===

[EVT-0057] - On January 6, 2026 at 4:11 p.m. (UTC‑8) Julie Longson, a Workday administrator, ran an **Assign Roles** workflow.   The workflow added several new role assignments for a group of 21 users, including:  * **Shelby Bean** – given the “Financial Aid Counselor” role and additional access to unofficial student transcripts, a financial‑aid specialist role, and two levels of student‑assistant roles.   * **John Davis** – assigned the “Director, Outreach” role effective January 6, 2026.   * Other staff such as Amanda Jackson, Dylan Westbury, Na Zhuo, Sydney Padgett, Robert Sanchez, Patrick Rolfe, Keith Grant, Zeshan Shafiq, Gemma Gabor, Caroline Pezzarossi, Lindsay Buchko, Caroline Finklea Vizzuto, Michael Tota, Khadijat Rashid, Emelia Beldon, Mercedes Olson, Corey Burton, Shanna Cooley, and Vicki Cheeseman received the same set of roles that Shelby Bean was granted.  The event completed automatically with no manual intervention required after the workflow started. No roles were removed; all changes were additions to the users’ existing role sets. The transaction was logged under event ID **EVT‑0057** and recorded as an “Assign Roles – Add/Remove” action.

[EVT-0058] - Julie Longson, an administrator at Gallaudet University, performed a role‑assignment action on January 6, 2026. She added the “Financial Aid Specialist (View Only) – Gallaudet University” role to employee John Davis, making the assignment effective on that same day. The event was recorded as an “Assign Roles” transaction, completed automatically at 13:12:23 EST. The audit shows the role was added to John Davis’s profile, with no roles removed or changed. The action was logged under event ID EVT‑0058 and captured in the Workday audit trail.

[EVT-0059] - On January 6, 2026 at 4:15 PM EST, Julie Longson (user ID 1004645) added John Davis to the “Financial Aid Specialist – UBSG – U” user‑based security group. The action was performed through the “Assign Users to User‑Based Security Group” transaction, which created a new group membership event. The change took effect immediately (effective date 1:15 PM) and was logged as event ID EVT‑0059. No users were removed, and no attachments were added. The audit shows the new membership was recorded in the system’s security group tables and logged for compliance purposes.

=== Kristinn Bjarnason ===

[EVT-0042] - On January 7, 2026 at 12:03 PM EST (09:03 AM PST), Kristinn Bjarnason, a Security Administrator, created a new assignable role called “Manage Course Offerings.” The role was given the internal ID ASSIGNABLE_ROLE‑3‑517 and was added to the Academic Unit hierarchy. The role is administered by a Tenanted Security Group, restricted by Role Usage metadata, and the transaction was processed for task behavior. The role’s base language is set to English (United States). No prior value existed, and no items were removed. The event was logged as EVT‑0042 with eight attributes recorded.

[EVT-0043] - On January 7, 2026 at 12:04 PM Eastern Standard Time, Kristinn Bjarnason created a new security group in Workday. The group was named “Manage Course Offerings – RBSG‑C” and received the internal ID ROLE‑BASED_SECURITY_GROUP__CONSTRAINED_-3-452. The creation event recorded the entry moment (2026‑01‑07 09:04:30.306 –0800) and the group’s name, ID, and XML definition (the XML file contents were not included in the audit). No prior values existed because this was a new object. The action was logged under event ID EVT‑0043 and involved the “Create Security Group” transaction. No relationships were removed or added beyond the standard processing instance and language settings.

[EVT-0044] - On January 7, 2026 at 12:04 PM (EST) Kristinn Bjarnason added a new role‑based security group called **“Manage Course Offerings – RBSG‑C”** to the Workday instance. The action was performed through the **“Edit Role‑Based Security Group (Constrained)”** task. The group was created with the setting **“Applies To Current Organization And Unassigned Subordinates”** and its XML definition was excluded from the audit log. The new group is now part of the **“Manage Course Offerings”** security framework and will define membership for the role‑based group “RBSG‑C.” No other changes were made.

[EVT-0045] - On January 7, 2026 at 12:05 PM EST (09:05 AM PST), Kristinn Bjarnason edited the security settings for a Workday domain. He added new permissions that allow the “Manage Course Offerings – RBSG‑C” and “Manage: Mass Course Offerings” roles to view and modify course offerings. These changes granted the corresponding security groups access to the domain and its policies, and updated the transaction logs for the task behavior. No items were removed or attached; the action was recorded under event ID EVT‑0045.

[EVT-0046] - On January 7, 2026 at 12:06 PM (EST) a Workday administrator named Kristinn Bjarnason performed an action that activated pending security policy changes. The change created a new security group called **“Manage Course Offerings – RBSG‑C”** and granted it permission to view and modify the **“Manage: Mass Course Offerings”** domain. This update was logged as event EVT‑0046 and included a comment that the group was created for the purpose of managing course offerings (incident INC0165358/CHG0037144). The action removed an earlier entry dated December 19, 2025 at 7:36 AM that had referenced the same “gallaudet” tenant, effectively replacing it with the new security group. No additional attributes or attachments were added beyond this policy activation.

[EVT-0047] - On January 7, 2026 at 9:09 AM (Eastern Time), Workday administrator **Kristinn Bjarnason** processed a request from **Ericka Brown** to give **Beth Gibbons** the “Manage Course Offerings” role for two academic units:   1. **Continuing Education Academic Unit** (P000506 Associate Dean, Graduate Education)   2. **Dean of Faculty Academic Unit / Graduate** (P000506 Associate Dean, Graduate Education)  The role assignment was set to take effect on January 7, 2026. The transaction was recorded as an “Assign Roles – Add/Remove” event (EVT‑0047) and was automatically completed. No roles were removed, and the change was logged for both Beth Gibbons (the role recipient) and Ericka Brown (the requester).

[EVT-0048] - On January 6, 2026 at 9:00 PM a Workday “Role‑Based Group Change – Event Lite” was created. This event prepared the assignment of a new role for an associate dean.  On January 7, 2026 at 12:00 AM (Eastern Time) the role “P000506 Associate Dean, Graduate Education – Beth Gibbons (+1)” was added to the “Manage Course Offerings” security group for both the Continuing Education Academic Unit and the Dean of Faculty Academic Unit / Graduate. This change was part of a broader role‑assignment workflow that had been triggered earlier.  At 9:10 AM on the same day, Kristinn Bjarnason (user ID 1003966) executed an “Assign Roles – Add/Remove” transaction. He added the role of **Assistant Dean, Graduate Education (P007153)** to Mary Perrodin‑Singh. The assignment was made effective on January 7, 2026, and the action was performed at 9:10:29.967 AM. The request came from Ericka Brown (incident INC0165358/CHG0037144), and the change was automatically completed by the system.  In summary, Kristinn Bjarnason added Mary Perrodin‑Singh to the Assistant Dean role for Graduate Education, effective January 7, 2026, following a request from Ericka Brown. The change was part of an automated workflow that also updated related security groups earlier on January 6 and 7.

[EVT-0049] - On January 12, 2026 at 8:50 AM (Workday system time), administrator **Kristinn Bjarnason** performed a role‑assignment update.   He added the security group or role **INC0165902** back into the system and then assigned the user **Marlena Demmon** to the position of **Residence Education Coordinator (P007401)** effective that same day.   The change was recorded as part of the “Assign Roles – Add/Remove” transaction and completed automatically. No roles were removed, only the new assignment was added. The event is logged under ID EVT‑0049 and shows that the action took place in the Gallaudet University tenant.

[EVT-0050] - On January 12, 2026 at 11:42 AM (local time), Workday administrator **Kristinn Bjarnason** processed a request from **Beth Gibbon** (INC0165359) to give **Mary Perrodin‑Singh** the role of *Assistant Dean – Graduate Education*.   The assignment was created in the system with an effective date of **January 12, 2026**. The event was logged as “Assign Roles – Add/Remove” and recorded under the workflow definition for role assignment. No roles were removed or changed for any other user in this transaction. The action was completed automatically and the event record shows it finished successfully on the same day.

[EVT-0051] - On January 14, 2026 at 12:16 PM EST, Workday administrator **Kristinn Bjarnason** performed an “Edit Workday Account” transaction for user **Veronica Tovar Cervantes**.   During that transaction, Kristinn added a large set of notification categories to Veronica’s user‑notification settings. The categories include, but are not limited to: Academic Advising, Accounting Center Job Process, Activity Comments, Ad Hoc Worker Communications, Add Employee to Comp Process, Admissions, Anniversaries, Background Error Notifications, Benefits Notifications, Birthdays, Bonus/Comp/Stock/Merit review, Business Process General Notifications, Check‑Ins, Consignment Usage Requisitions Notification, Create Inventory Waves, Customer Central, Drive Access Additions/Changes/Removals, E&G Committee Invitation, Evidence of Insurance, Extended Enterprise Campaigns, Financial Aid – Disbursements/General/Packages, General Notifications, Give Feedback, Goal Notes, Integrations, Interview Schedule Communications, Inventory Average Daily Usage/Count Notification/Preferred Supplier Lead Time/Replenishment, Learning Campaigns/Expiration Periods, Manage Individual Benefit Rates, Marketplace Opportunity Promotion, Metric Review Notification, Onboarding Plan Notifications/Setup, Open Enrollment for Benefits, Par Average Daily Usage/Lead Time/Recommended Reorder Point, Passive Enrollment Event, Prism Data Acquisition Notification/Wbucket Complete Notification, Remote Form I‑9 Authorized Representative Notification, Repository Document, Request for Quote Notifications, Review Supplier Synchronization Errors, Schedule Distribution (Request Time Off/Review Time Off), Scheduled Future Processes, Scheduled Live Report Completion, Scheduled Report Completion, Share Career Development Opportunity/Path Notification Category, Share notifications, Student Engagement Monitoring, Student Financials, Student Records, Student Recruiting – Marketing/Transactional, Supplier Contract Expiration/Renewals, Surveys, System Monitor Notifications, Talent Pool Notifications, Time Off, Upcoming Shift, Voluntary Self‑Identification of Disability, Workbook Access Additions/Removals, Workbook Comments/Conversations, Workbook Import Failures/Successes, Workbook Live Data Scheduled Updates, Workbook Notify If Function Notifications, Workbook Tasks, Worker Communications, and the “~Gigs~” category.    The transaction also set some account attributes: an account expiration date of 2026‑01‑14, a session timeout of 30 minutes, and enabled reset challenge questions. No notifications were removed; all changes were additions to Veronica’s notification configuration. The event was logged under event ID **EVT‑0051** and involved 503 rows of audit data.

[EVT-0052] - On January 15, 2026 at 11:22 AM (EST) Kristinn Bjarnason edited the Workday account for user Veronica Tovar Cervantes. During that transaction he removed a long list of notification categories (such as Academic Advising, Accounting Center Job Process, Birthdays, etc.) from Veronica’s notification settings and then re‑added them with specific delivery channels. The new configuration enabled email, mobile push, or both for each category, depending on the setting. In short, Kristinn updated Veronica’s notification preferences to ensure she receives alerts via email and/or mobile push for all listed Workday events.

[EVT-0053] - On January 21, 2026 at 5:54 AM Eastern Time, Workday administrator Kristinn Bjarnason removed the “School Director” role from Teresa Blankmeyer Burke (employee ID P000681) at the Arts and Humanities School. The removal was performed in response to Teresa’s request (incident INC0166411). At the same time, the system added the “Professor” role to Brian Greenwald (employee ID P000679) for the Arts and Humanities School, effective January 21, 2026. The transaction was logged under the “Assign Roles – Add/Remove” process and completed automatically with no manual approval required. The event was recorded as EVT‑0053 in the audit log.

[EVT-0054] - On January 21, 2026 at 8:57 a.m. (EST), Workday recorded that Kristinn Bjarnason added Teresa Blankmeyer Burke back to her role as Professor and School Director of the Arts and Humanities School. The change was made because Teresa had returned from a sabbatical (incident INC0166411). The role assignment became effective on January 21, 2026. No roles were removed; the action simply added Teresa to the appropriate security groups for her position. The event was logged under event ID EVT‑0054 and completed automatically by the system.

[EVT-0055] - On January 22, 2026 at 9:19 AM (EST) a Workday administrator named Kristinn Bjarnason added new permissions to the “Student Finance Administrator – UBSG” security group. The change created a set of domain‑level permissions that allow the group to view student data, specifically the “Student Transcript” and “Withdrawal and Leave” records. The permissions were added as “View Only” access for those two data sets, and the transaction was recorded under the event ID EVT‑0055. No permissions were removed, and no other users or attachments were involved in this action. The audit log shows the new permission entries, their XML representation was excluded from the audit details, and the transaction was part of the “Maintain Domain Permissions for Security Group” task.

[EVT-0056] - On January 22, 2026 at 9:20 AM (EST) a Workday administrator named **Kristinn Bjarnason** (user ID 1003966) activated pending security policy changes for the **gallaudet** tenant.    The activation updated the **Student Finance Administrator – UBSG security group** so that it now has view access to two domains:   * **Student Data: Withdrawal and Leave**   * **Student Data: Student Transcript**  The change was recorded in the audit log as a transaction titled “Activate Pending Security Policy Changes.” The event (EVT‑0056) shows the new security timestamps and notes that the XML file contents were excluded from the audit. The action replaced an earlier instance dated January 17, 2026 at 3:20 AM.

=== Thad Ferguson ===

[EVT-0039] - On January 12, 2026 at 2:06 PM Eastern Standard Time, Workday admin **Thad Ferguson** (user ID 1000998) edited the student record for **Jennifer Ceyanes**. He changed her Student ID from the temporary value **TEMP_STUDENT_0002694** to the new permanent ID **1117210**. The change was recorded in the “Student Financials Period Record Student ID (Denormalized)” field and logged as part of the “Edit Student ID” transaction. No other attributes were altered, and no attachments were added or removed during this update.