Workday separates the definition of a business process workflow, which steps occur and in what order, from the security policy governing who is permitted to initiate specific actions within that workflow, such as creating a supplier invoice. The Official Workday Pro Procure-to-Pay Guide explains that to add a security group, such as Accountant, as an authorized initiator for the Create Supplier Invoice action, the administrator edits the Business Process Policy for the Supplier Invoice business process and adds the security group to the initiating step. Option A is incorrect because Edit Tenant Setup - Financials does not manage security group permissions for business process actions. Option B is incorrect because Edit Business Process Definition configures the structure and steps of the workflow itself, such as adding approval steps, not which security groups may initiate those steps. Option D is incorrect because Edit Company Procurement Options governs procurement configuration settings and defaults, and has no role in granting security groups permission to initiate the supplier invoice creation action.