This article explains how to configure the permissions in Hibob before starting to use the Hibob integration on Deel. Along the steps to perform, the client will find the permissions required to make each plugin of the integration work.
In this article
This article goes through the steps to set up the permissions in Hibob. The steps are:
- Before you begin
- Step 1. Create a new API service user
- Step 2. Create a permission group
- Step 3. Add the service user to the permission group
- Step 4. Set the group's permissions
- What's next
- Frequently asked questions (FAQs)
Before you begin
To complete the steps in this article:
- The client must have an admin role in both Deel and Hibob
- The client is familiar with the requirements on the Hibob side
- The client already created Sites in Hibob and assigned users to them
Step 1. Create a new API service user
For instructions on how to create a new API service user, follow the instructions available in Hibob's documentation.
Make sure to copy the user ID and Token, as they will be needed to connect the integration later.
Step 2. Create a permission group
To create a permission group, follow the instructions available in Hibob's documentation.
Step 3. Add the service user to the permission group
To add a service user to a permission group, follow the instructions available in Hibob's documentation.
Step 4. Set the group's permissions
To set the permissions of the permission group, follow the instructions available in Hibob's documentation Set permissions to the permissions group.
The permissions depend on the feature or plugin you want to enable. Check the section Permissions to understand which ones to enable when setting up the permission group.
Permissions
This section lists the permissions required to make the integration work, organized by plug-in.
Default permissions
These permissions are enabled by default at the time of writing, always make sure that they're enabled when configuring the permission group in Hibob.
| Type / Tab | Section | Category | Permission | Comments |
|---|---|---|---|---|
| People's data | People | About | View selected employees' About sections | - |
| People's data | People | Basic info | View selected employees' Basic info sections | - |
| People's data | People | Work | View selected employees' Work sections | - |
| People's data | People | Work contact details | View selected employees' Work contact details sections | - |
Global Payroll - employee data sync
These permissions are required to enable the Global Payroll - employee data sync plugin.
| Type / Tab | Section | Category | Permission | Comments |
|---|---|---|---|---|
| People's data | People | Address | View selected employees' Address sections | - |
| People's data | People | Payroll | View selected employees' Payroll sections | - |
| People's data | People | Employment | View selected employees' Employment sections | - |
| People's data | People | Personal | Edit selected employees' Personal sections | Edit permissions are needed to get the full birth date, because it's considered PII. |
| People's data | People | Personal | View selected employees' Personal sections | - |
| People's data | People | Lifecycle | View selected employees' Lifecycle section histories | - |
| People's data | People | Lifecycle | View selected employees' Lifecycle sections | - |
| Features | Personal | Personal | View the aggregate of everyone's Personal data | - |
| Type / Tab | Section | Category | Permission | Comments |
|---|---|---|---|---|
| Features | Time Off | Settings | See company's time off settings | - |
Global Payroll - Auto Sync Payslip and End of Year (Tax document)
These permissions are required to enable the Global Payroll - Auto Sync Payslip and End of Year (Tax document) plugin.
| Type / Tab | Section | Category | Permission | Comments |
|---|---|---|---|---|
| People's data | Docs | Shared Docs | Upload selected employees’ docs in the folder | - |
| People's data | Docs | [Custom folder] | Upload selected employees’ docs in the folder | Enable this permission for every custom folder you want to give access to |
Global Payroll - Time Off
These permissions are required to enable the Global Payroll - Time Off plugin.
| Type / Tab | Section | Category | Permission | Comments |
|---|---|---|---|---|
| Features | Time Off | Settings | See company's time off settings | - |
| People's data | Time Off | See who's out today | See who's out based on their personal working pattern and time off calendar | - |
| People's data | Time Off | See who's out today | See who's out because of a private policy | - |
| People's data | Time Off | See who's out today | See who's out today | - |
Global Payroll - one time payment
These permissions are required to enable the Global Payroll - one time payment plugin.
| Type / Tab | Section | Category | Permission | Comments |
|---|---|---|---|---|
| People's data | People | Lifecycle | View selected employees' Lifecycle sections | - |
EOR Time Off
Same as Global Payroll - Time Off.
What's next
Now that you have set up permissions, you can start syncing data between Deel and Hibob.
- If you want to use the integration for EOR and Direct employees, visit Setting Up The HiBob Integration On Deel For EOR Employees And Direct Employees.
- If you want to use the integration for Global Payroll employees, visit Setting Up The HiBob Integration On Deel For Global Payroll Employees
Video tutorial
If you prefer, you can watch a video tutorial that explains how to configure the Hibob permissions.
Frequently asked questions (FAQs)
[ACCORDION] How can a custom table permission is not granted error be resolved?
In addition to viewing rights to categories in scope, provide the Deel service account with
Editing rights to the Personal section and permission to view all histories (even if we do not use histories)
It is no problem mapping the Site Country and City