From b275962022694b8b48493ef53409d5638a4c7fa5 Mon Sep 17 00:00:00 2001 From: Jeran Norman Date: Fri, 10 Jul 2026 14:29:20 +0300 Subject: [PATCH] UKG Pro WFM: require manager-level integration user for time-off Time-off create moves to the manager endpoint, which checks manager scope. Update the credential step to require a dedicated integration user with manager-level permissions (FAP, Manager Role + Hyperfind, data access) and add a Note that exact names are tenant-specific. INT-8679 --- connection-guides/hris/ukgprowfm.mdx | 18 +++++++++++++++--- 1 file changed, 15 insertions(+), 3 deletions(-) diff --git a/connection-guides/hris/ukgprowfm.mdx b/connection-guides/hris/ukgprowfm.mdx index ecf3789..154138a 100644 --- a/connection-guides/hris/ukgprowfm.mdx +++ b/connection-guides/hris/ukgprowfm.mdx @@ -26,11 +26,23 @@ UKG Pro Workforce Management uses an OAuth LDAP (password-based) flow. You'll ne - **Client Secret** - - Use a dedicated integration user where possible. Make sure you have: - + + Use a dedicated integration user with manager-level permissions. StackOne creates and manages time-off requests on behalf of your employees, which UKG treats as a manager action. Make sure the user has: + - **Username** - **Password** + + Grant the integration user: + + - A manager Function Access Profile that allows managing employee time-off requests (create and edit). + - A Manager Role with an employee group (Hyperfind) covering every employee you want to manage time-off for. Employees outside this scope are rejected. + - Data access to those same employees. + + If time-off requests should be approved automatically instead of left pending, enable Auto Approval on the relevant time-off request subtype. + + + The exact profile, role, and access-point names vary by UKG tenant and version. Ask your UKG admin to grant the integration user manager-level time-off permissions covering the employees in scope. +