# BambooHR

> Joiners, movers and leavers. Prerequisites, setup steps and troubleshooting.

Source: https://docs.csquaregrc.com/connectors/bamboohr

## What it does

BambooHR is the joiner, mover and leaver record behind access-review and onboarding controls: who was hired, who left and on what date.

## Prerequisites

- A cSquare GRC workspace where you are an **owner** or **admin**.
- Connection method: **API key or token**.
- Access needed at BambooHR: Read-only. The key inherits the permissions of the user who created it, so use a read-only HR role.

## Set up

Open **Settings > Integrations** in [the app](https://app.csquaregrc.com), find BambooHR, then:

1. Sign in to BambooHR, open your profile menu and select API Keys.
2. Generate a key for cSquare and copy it.
3. Enter your BambooHR subdomain (the part before .bamboohr.com) with the key here.

## Verify the connection

1. Back in **Settings > Integrations**, BambooHR should show **Connected** with a recent sync time.
2. Open **Evidence** and filter by source **BambooHR**. The first sync can take a few minutes.
3. Open a control that depends on BambooHR and confirm the new evidence is linked.

## AI prompts

Paste these into Fibo in the app, or into any assistant connected through [MCP](/mcp/connect).

```text
I just connected BambooHR to cSquare GRC. Check that it is syncing, list the evidence it has collected so far, and tell me which controls in my active programs now have evidence from BambooHR.
```

```text
Which controls in my programs could be covered by BambooHR evidence but still have no current evidence? Group them by framework and suggest what to collect.
```

## Troubleshooting

### 401 Unauthorized

The subdomain is wrong or the key was revoked. Use the bare subdomain, not the full URL, and reissue the key.

### Employees missing termination dates

The API-key user cannot see terminated employees. Give that user access to former employees in BambooHR.

### Test connection fails immediately

Nine times out of ten the credential was pasted with a trailing space, or it was issued in a different tenant or region. Re-copy it and try again.

### The connector is quarantined

Collection paused after three consecutive failures. Fix the credential, then use Re-test and re-enable on the Active connections tab; it only resumes when the test passes.

### Connected, but no evidence appears

Check that at least one collection type is selected and that the account can see the resources. Read-only accounts scoped to a single project will only return that project.

### Still stuck?

```text
My BambooHR connector in cSquare GRC is failing. Here is the error I see: <paste error>. Walk me through the likely causes and the exact fix, step by step.
```