🔌 Setting Up a Least-Privilege User in Sage HR for Thoropass Integration
To connect Sage HR with Thoropass and make the most of compliance automation, you’ll need to create a dedicated API user with minimal permissions. This ensures secure, limited access—just enough to retrieve key employee information required for audits and access reviews.
🔧 Part 1: Create a Least-Privilege User in Sage HR
Thoropass only needs access to:
First name, last name
Business and personal email addresses
Employee status (active, inactive, onboarded, not onboarded)
Employee type (contractor or full-time)
Employment details: job title, department, and manager
Step 1: Create a Dedicated API User
Log in to Sage HR with admin credentials.
Go to Settings → Company → Directory.
Click Add (➕) to create a new employee.
Fill in the following:
First Name:
ThoropassLast Name:
IntegrationEmail: Use a service email, like
thoropass-integration@yourcompany.com
Set Access Level to Employee.
Click Save.
Step 2: Create a Custom Role
Go to Settings → Permissions → Roles.
Click Add Role, name it:
Thoropass Integration Viewer.Click Create.
Step 3: Set Role Permissions
Select the
Thoropass Integration Viewerrole.Click Add Permission → Access employee information.
Set Scope to
Anyone.Enable only these fields:
First nameLast nameWork emailPersonal emailEmployment statusEmployment typeJob titleDepartmentManager
Ensure all other fields are disabled.
Click Save.
Step 4: Assign the Role to the User
Go to Company → Directory and open the new user's profile.
Scroll to the Roles section.
Assign the
Thoropass Integration Viewerrole.Click Save.
🔗 Part 2: Connect Sage HR to Thoropass
Once your least-privilege user is ready, it’s time to connect Sage HR to Thoropass:
From Sage HR, click on your username in the top-right corner of the screen.
Select Settings from the dropdown.
Navigate to Integrations under the Settings tab.
Click on API.
Click Enable API Access.
Copy the generated API key.
Paste the API key into the Thoropass integration connection screen in-app to complete the integration.
✅ Success!
With this setup, Thoropass can securely sync with Sage HR, collect necessary employee details, and automate compliance evidence—while respecting least-privilege access principles.