How to Connect to BambooHR

How to Find Your API Key in BambooHR

Note: It's recommended that a person with the "Account Owner" role creates the API key for full read/write access.

To find your API Key in BambooHR, follow these steps:

Log in to your BambooHR account.
Click on your profile picture, at the bottom left corner.
Select API Keys from the menu.
If you don't have an API key already, you can create one by clicking on the Add New Key button.
Add the name for your API key.
Copy your API Key value.
Copy your subdomain.

Click on Settings ⚙️ button on the top right.
Then click on Access Levels from the left navigation menu.
Along with "Levels" click on the + button.
In the dropdown you will find the below mentioned three different access level options.

BambooHR provides the following pre-existing access levels:

Employee Access Level: For Employees who should never see sensitive information for anyone but themselves. (Not recommended for API Key owner)
Manager Access Level: For Employees who should never see sensitive information for anyone but themselves. (Not recommended for API Key owner)
Custom Access Level: For Employees who should never see sensitive information for anyone but themselves. (Recommended for API Key owner if no Account Owner Role person can create a key)

To create custom access levels and assign them to users, follow these steps:

Log in to your BambooHR account with Account Owner/Admin role.
Click on Settings ⚙️ button on the top right.
Then click on Access Levels from the left navigation menu.
Along with "Levels" click on the + button to create a new custom access level. Select Custom Access Level.
Enter name and description for the new custom access level and click on Next Step.
Skip What Can People with this Access Level Do? and go to the Next Step.
Under What this Access Level Can See step, make sure you are on See About other Employee section.
Now, select the types of permissions you want to allow this role to access for other employees.
Save the changes and assign the custom access level to the desired users by checking it in Levels. Click on the custom access level you created.
Click on Add Employee button. Select the employee name from the dropdown and click on Done.
Once the custom access level is assigned, users with that access level will have the specified permissions, including the ability to create API keys with write access if selected.

Now that you've created an API key with the needed permissions, you're ready to fill out your credentials in Vault.

You're connected now 🎉.