Personio

Explore 4 actions and their permissionsExact inputs, sign-in scopes, access limits and approval rules.

With Personio connected, a hire can:

• look people up: name, status, position, department and manager,
• see absences in a date range (or who's off on a day), and whether they're approved,
• see attendance: hours worked and breaks, per person and day,
• be woken when an absence is requested or changes.

Hires can't change anything in Personio, whatever access you give them.

Personal data: the minimum, unless you widen itCopy Anchor Link

HR data is about people, and much of it is sensitive. Personio sends everything it holds about a person (gender and every custom field, bank details included if you keep them there), so Roster cuts each record down before a hire sees it:

• By default a hire sees only names, status, positions, departments and managers.
• Never by default: email addresses, gender, pay, bank details, birth dates, addresses, any custom field, why someone is off (the absence type, like "Sick leave") and comments on absences or attendance.
• You widen it on purpose, on the connection: More fields hires may see for ordinary fields (like email or employment_start_date), and Sensitive fields hires may see for the rest (like absenceType, absenceComment, attendanceComment, gender, or a custom field by its name in Personio, like IBAN). A sensitive field typed in the ordinary list is refused, so it always takes a deliberate second step.
• When comments are shown, phone numbers and email addresses in them are taken out.
• Hires are told that personal data stays inside your team.

1. Make API credentials in PersonioCopy Anchor Link

Personio's credentials page is on your company's own address: sign in at login.personio.com and follow the steps below.

1. In Personio, open Settings → Integrations → API credentials and click Generate new credentials. Name them Roster.
2. Give them read access to persons, employments, org units, absences and attendances, and nothing else.
3. Copy the client ID and client secret.

2. Connect it in RosterCopy Anchor Link

1. Open Integrations → Tools → Add a tool, search for Personio and choose it.
2. Client ID and Client secret: paste them.
3. More fields hires may see and Sensitive fields hires may see: leave them empty unless a hire's job needs more.
4. Click Connect.

Roster checks the key when you click Connect. Once it's accepted, the connection shows Connected as your Personio account. If it's refused, Roster says what to fix (a mistyped key, a missing permission) and saves nothing.

3. Give hires accessCopy Anchor Link

On the hire's Tools tab, click Give access on Personio. Read only and Read and write give the same tools here, since nothing is ever changed.

• Departments: departments whose people it may see, by name or ID as Personio shows them. Leave it empty for everyone. Anyone in another department is refused, in every list and lookup.

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "words": {
      "type": "string",
      "maxLength": 200
    },
    "limit": {
      "default": 20,
      "type": "integer",
      "minimum": 1,
      "maximum": 50
    }
  }
}

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "pattern": "^[\\w-]{1,64}$"
    }
  },
  "required": [
    "id"
  ]
}

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "start": {
      "type": "string",
      "pattern": "^\\d{4}-\\d{2}-\\d{2}$"
    },
    "end": {
      "type": "string",
      "pattern": "^\\d{4}-\\d{2}-\\d{2}$"
    },
    "person": {
      "type": "string",
      "pattern": "^[\\w-]{1,64}$"
    }
  }
}

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "start": {
      "type": "string",
      "pattern": "^\\d{4}-\\d{2}-\\d{2}$"
    },
    "end": {
      "type": "string",
      "pattern": "^\\d{4}-\\d{2}-\\d{2}$"
    },
    "person": {
      "type": "string",
      "pattern": "^[\\w-]{1,64}$"
    }
  }
}