---
category: [Administration & Integrations, Administration & Integrations/Custom Integrations & Apps, Platform and Product Extensions, Platform and Product Extensions/Workday Extend, Platform and Product Extensions/Integration]
keyword: [Extend, Model Components, Model Domains, Security Domain, Extend Domains]
nav: wcp_docs
parent_url: /wcp_docs/
title: Security Evaluation with Multiple Targets
layout: subsection
---

You can set `"secureByTarget": true` on multiple `SINGLE_INSTANCE` fields of a business object. Doing so enables you to define business processes that require routing to or approval by multiple recipients. When you set the `secureByTarget` attribute on multiple fields, the security evaluation is based on the aggregation of the multiple security contexts.

```

{
  "id": 1,
  "name": "createdBy",
  "label": "Created By",
  "type": "SINGLE_INSTANCE",
  "target": "WORKER",
  "secureByTarget": true
},
{
  "id": 2,
  "name": "costCenter",
  "label": "Cost Center",
  "type": "SINGLE_INSTANCE",
  "target": "COST_CENTER",
  "secureByTarget": true
},
{
  "id": 3,
  "name": "company",
  "label": "Company",
  "type": "SINGLE_INSTANCE",
  "target": "COMPANY",
  "secureByTarget": true
}
```

For a business object using the fields specified in the sample code above, this table displays 3 instances of that business object:

<table><thead><tr><th>Transaction ID</th><th>Created By</th><th>Company</th><th>Cost Center</th></tr></thead><tbody><tr><td>1</td><td>Logan McNeil</td><td>Green Planet Solutions</td><td>40000_Office_of_CHRO</td></tr><tr><td>2</td><td>Logan McNeil</td><td>GMS</td><td>61100_IT_Services_Mgmt</td></tr><tr><td>3</td><td>Jack Taylor</td><td>Green Planet Solutions</td><td>61100_IT_Services_Mgmt</td></tr></tbody></table><br/>

In a GMS tenant, Logan is a member of the GMS company and the 41600 HR Services cost center: ![](GUID-18275ea3-9b5d-4dd4-9e2e-c8b7e90ec5d6-enHYPHENus.png)

The cost center managers for each cost center are: ![](GUID-c23df5ad-a4cd-4f2e-b58d-7ee7a405b78a-enHYPHENus.png)

If you configure the domain security policy to allow the Cost Center Manager to be able to access the business object instance, the security evaluation is based on the Cost Center Manager from EITHER the `Created By` worker’s cost center manager OR the `Cost Center` field’s cost center manager.

If you configure a business process step to get approval from the Cost Center Manager, the task in My Tasks is routed to the Cost Center Manager from both the `Created By` worker’s cost center manager AND the `Cost Center` field’s cost center manager (if these cost center managers aren't the same person).

This table displays who will have permissions to see each transaction:

<table><thead><tr><th>Transaction ID</th><th>Cost Center Managers with Visibility</th></tr></thead><tbody><tr><td>1</td><td>Joy Banks (from cost center field) and Logan McNeil (Logan is the cost center manager of their own cost center).</td></tr><tr><td>2</td><td>Anthony Rizzo (from cost center field) and Logan McNeil (Logan is the cost center manager of their own cost center).</td></tr><tr><td>3</td><td>Anthony Rizzo (from cost center field) and Jack Taylor (Jack is cost center manager for the cost center associated with his position).</td></tr></tbody></table><br/>

## <a id="section_1"></a>View Security Context for Extend Related Instances

You can use the <b>View Security for Extend Related Instance</b> task, secured by the <i>Manage: App Manager</i> domain in the System functional area, to view the security context for related business object instances. This task is available as a related action from instances of Extend business objects and target Workday-delivered business objects.

As a related action from a business object instance, select <b>Workday Extend</b> &gt; <b>View Security Context</b>. The task displays the security context business objects for the selected instance. If multiple fields of the Extend business object are secured by target Workday-delivered business objects, the task displays the aggregated security context for all the related Workday-delivered business object instances.

You can create a custom report to display Extend business object instances and their related Workday-delivered business object instances, then access this task as a related action to view the security context of each instance.

We recommend that you select an instance with the most common security configuration to determine the security context for your specific use case.

### Related Information

[Example: Securing Expense Type Transaction to Worker and Cost Center](/wcp_docs/reu1682537298330.html)