How to Connect to BambooHR

• How to Find Your API Key in BambooHR
• Pre-existing Access Levels
• How to Create Custom Access Levels (for writing data)

Handy guides related to BambooHR:

• How to add custom access levels to a user in BambooHR

How to Find Your API Key in BambooHR

REMARK: It's recommended that a person with the "Account Owner" role creates the API key for full read/write access.

To find your API Key in BambooHR, follow these steps:

1. Log in to your BambooHR account.
2. Click on your profile on the top right.
3. Select the "API Keys" section from the dropdown menu.
4. If you don't have an API key already, you can create one by clicking on the "Add New Key" button.
5. Copy your API Key value and subdomain to enter in Vault.

Pre-existing Access Levels

1. Click on "Settings ⚙️" button on the top right.
2. Then click on "Access Levels" from the left navigation menu.
3. Along with "Levels" click on

   +

   button.
4. In the dropdown you will find the below mentioned three different access level options.

BambooHR provides the following pre-existing access levels:

• Employee Access Level: For Employees who should never see sensitive information for anyone but themselves. (Not recomended for API Key owner)
• Manager Access Level: For Employees who should never see sensitive information for anyone but themselves. (Not recomended for API Key owner)
• Custom Access Level: For Employees who should never see sensitive information for anyone but themselves. (Recomended for API Key owner if no Account Owner Role person can create a key)

How to Create Custom Access Levels (for reading/writing data)

To create custom access levels and assign them to users, follow these steps:

1. Log in to your BambooHR account with Account Owner/Admin role.
2. Click on "Settings ⚙️" button on the top right.
3. Then click on "Access Levels" from the left navigation menu.
4. Along with "Levels" click on

   +

   button to create a new custom access level. Select Custom Access Level.
5. Enter a name for new custom access level and click on Next.
6. Select customized access for this role and click on Next Step.
7. Under

   What this Access Level Can See

   step, make sure you are on

   See About other Employee

   section.
8. Now, select the types of permissions you want to allow this role to access for other employees.
9. Save the changes and assign the custom access level to the desired users by checking it in

   Levels

   . Click on the custom access level you created.
10. Click on Add Employee button. Select the employee name from the drop down and click on Done.
11. Once the custom access level is assigned, users with that access level will have the specified permissions, including the ability to create API keys with write access if selected.

Vault Connection Setup

Now that you've created an app connector with the needed permissions, you're ready to fill out your credentials in Vault.