Workday delivers a set of predefined security groups aligned to common roles within the procure-to-pay process, each granting the specific domain permissions needed for that role's typical responsibilities, such as entering supplier invoices for accounts payable staff. The Official Workday Pro Procure-to-Pay Guide identifies Accounts Payable Data Entry Specialist as the security group designed to grant the permissions necessary to create supplier invoices, making it the appropriate assignment for a new employee in the Accounts Payable department with this responsibility. Option B is incorrect because Security Administrator grants broad access to configure security groups, roles, and policies across the tenant, which is unrelated to and far exceeds the access needed for routine invoice entry. Option C is incorrect because Finance Administrator typically provides broad configuration access across financial setup areas, again exceeding what a data-entry-focused new hire requires. Option D is incorrect because Accounts Receivable Specialist relates to the order-to-cash and customer billing side of the ledger, the opposite function from accounts payable supplier invoicing.