How to create a UKG Ready Security Profile for Connect To AD

We need to refer to a security profile when creating a service account so we can either create a new one or use an existing one.

The security profile of the UKG Ready service account determines the employee datasets it can access, ensuring only necessary data is used.

To create a new UKG Ready Security Profile, navigate to:

Settings > Profiles/Policies> Security> New Security Profile.

When creating a security profile, name it something distinctive like ConnectToADProfile and ensure that it's set to Active.

Choose the HR tab under Security Items and set the required access levels for the security profile.

To view the information stored in the saved report , you need to grant Connect to AD view permissions on various datasets. The list below shows the recommended access, but you can increase or decrease the number of accessible datasets based on your integration needs.

Navigate to the Employee Management section of the HR tab. From the permission drop-down menu, select View for the following data sets:

• Employee Information (My Team)
• Account/Personal Information
• Cost Centers
• Dates
• Demographics
• Jobs
• Managers
• Profiles

If you wish to write the user email or telephone number back to UKG, you will need to grant Connect to AD some additional permissions.

To do that, navigate to the Modules tab, scroll down to REST API Resources, and give Connect To AD view and edit permissions on:

• Employees
• Employees (changed)
• Employees (me)

Once all permissions are set, remember to save your work.

The security profile can now be used by the service account.

This article is exclusively for UKG Ready. If you use UKG Pro, please ensure you have selected the correct source from the drop-down menu at the top of the page.

This article is exclusively for UKG Ready. If you use UKG Onboarding, please ensure you have selected the correct source from the drop-down menu at the top of the page.