Connect Lattice to Drata to automate your workflows, depending on your use case:
UAR (User Access Reviews): Uses an API key connection. Connects to Lattice to sync user and role data for access reviews.
HRIS Employee Data Sync: Uses a secure sign-in (OAuth) connection. Connects to Lattice HRIS to sync personnel and employment details.
The sections below outline both connection types.
Prerequisites
You must be an administrator in your organization’s Lattice account.
For HRIS connections, you will also need your company’s Lattice subdomain (for example,
yourcompany.latticehq.com).
Step-by-Step: UAR Connection
Step 1: Get Your API Key
You’ll need an API key from Lattice to connect it to Drata.
Sign in to the Lattice Dashboard and select Switch to admin in the bottom-left corner.
In the left menu bar, select Settings → Platform → API Keys.
Select Generate API Key.
Copy the new API key and store it securely.
Step 2: Connect Lattice as UAR
In Drata, go to Connections → Available Connections.
Search for Lattice and select Connect. Make sure it is the UAR connection type.
Accept the permissions from the pop up modal.
Enter your API key from Step 1.
Tip: Ensure your API key is active and that you have Super Admin permissions in Lattice.
Step-by-Step: HRIS Connection
Step 1: Connect Lattice HRIS to Drata
In Drata, go to Connections → Available Connections.
Search for Lattice HRIS and select Connect. Make sure it is the HRIS connection type.
You’ll be redirected to Lattice to sign in and approve access.
When prompted, enter your Lattice HRIS subdomain.
After authorization, Drata will begin securely syncing employee data from Lattice.
Note: The Lattice HRIS connection uses a secure sign-in flow managed through Merge. Drata requests read-only access to employee data via the Lattice API, and no credentials are stored in Drata.
Required Permissions for HRIS
Drata requests the following read-only scopes from Lattice HRIS to complete the sync:
employees:employment_detailsemployees:role_detailsemployees:personal.reademployees:contact_information.read
These scopes allow Drata to securely retrieve employment, role, and contact data from Lattice.
Data Synced from Lattice HRIS
Drata retrieves employee data from the Lattice /v2/employees API endpoint.
Drata Field | Lattice Field Path | Required |
|
Personal Email |
| Optional |
|
Work Email |
| Required |
|
First Name |
| Required |
|
Last Name |
| Required |
|
Manager |
| Optional |
|
Job Title |
| Optional |
|
Employment Type |
| Required |
|
Employment Status |
| Required |
|
Start Date |
| Required |
|
Termination Date |
| Optional |
|
