The Greenhouse integration enables security and compliance teams to automate User Access Reviews (UAR) by syncing user account and role data from Greenhouse. This helps organizations monitor which users have access to Greenhouse and review assigned roles to support compliance monitoring.
Key Capabilities
User Access Review Data Sync: Import Greenhouse user accounts into Drata
Role Visibility: Monitor roles assigned to users within Greenhouse
Access Governance: Maintain visibility into who has access to Greenhouse to support audit workflows
This integration supports User Access Review workflows, helping demonstrate compliance with access control policies.
Prerequisites & Data Access
Greenhouse Access Requirements
You must have Site Admin privileges in your Greenhouse account.
You must create a Harvest API key with the required permissions.
You must obtain your Greenhouse User ID.
Drata Role Requirements
To create or modify connections, you must have one of the following Drata roles with write access: Admin, Workspace Manager, or DevOps Engineer
Access Reviewers can view the connection page but cannot create or modify connections
Permissions & Data Table
Permission / Scope | Why It’s Needed |
Users | Allows Drata to retrieve user account information |
User Roles | Allows Drata to retrieve role assignments for access review monitoring |
Harvest API Key | Authenticates the integration |
Greenhouse User ID | Identifies the user authorizing the integration |
Step-by-Step Setup
Step 1: Create a Harvest API Key
Log in to your Greenhouse account.
Navigate to the Dev Center and create a new Harvest API key.
Configure the API key with the following parameters:
API Type: Harvest
Partner: Custom
Description: Enter a description for the integration (for example, Drata integration).
Assign the following permissions to the API key:
Users
User Roles
Save the API key and copy the generated value.
Expected outcome:
You have created and saved the Harvest API key required for the integration.
Step 2: Retrieve Your Greenhouse User ID
Log in to your Greenhouse account.
Navigate to your user profile or account settings.
Locate and copy your Greenhouse User ID.
Your account must have Site Admin permissions for the integration to work correctly.
Expected outcome:
You have identified the Greenhouse User ID required for the connection.
Step 3: Connect Greenhouse in Drata
Log in to Drata → go to the Connections page.
Navigate to your Available Connections.
Search for and start the Greenhouse connection process.
Enter the following information when prompted:
Greenhouse Harvest API Key
Greenhouse User ID
Expected outcome:
Greenhouse is successfully connected and user access data begins syncing to Drata.
Important Notes
Authentication method: The Greenhouse integration uses a Harvest API key.
Required permissions: The API key must include Users and User Roles permissions.
Network restrictions: If your organization uses a Web Application Firewall (WAF), ensure required Drata IP addresses are allowlisted so the connection can be established.
