Skip to main content

Lattice Connection

Updated today

Connect Lattice to Drata to automate your workflows, depending on your use case:

  • UAR (User Access Reviews): Uses an API key connection. Connects to Lattice to sync user and role data for access reviews.

  • HRIS Employee Data Sync: Uses a secure sign-in (OAuth) connection. Connects to Lattice HRIS to sync personnel and employment details.

The sections below outline both connection types.

Prerequisites

  • You must be an administrator in your organization’s Lattice account.

  • For HRIS connections, you will also need your company’s Lattice subdomain (for example, yourcompany.latticehq.com).

Step-by-Step: UAR Connection

Step 1: Get Your API Key

You’ll need an API key from Lattice to connect it to Drata.

  1. Sign in to the Lattice Dashboard and select Switch to admin in the bottom-left corner.

  2. In the left menu bar, select Settings → Platform → API Keys.

  3. Select Generate API Key.

  4. Copy the new API key and store it securely.

Step 2: Connect Lattice as UAR

  1. In Drata, go to Connections → Available Connections.

  2. Search for Lattice and select Connect. Make sure it is the UAR connection type.

  3. Accept the permissions from the pop up modal.

  4. Enter your API key from Step 1.

Tip: Ensure your API key is active and that you have Super Admin permissions in Lattice.

Step-by-Step: HRIS Connection

Step 1: Connect Lattice HRIS to Drata

  1. In Drata, go to Connections → Available Connections.

  2. Search for Lattice HRIS and select Connect. Make sure it is the HRIS connection type.

  3. You’ll be redirected to Lattice to sign in and approve access.

  4. When prompted, enter your Lattice HRIS subdomain.

  5. After authorization, Drata will begin securely syncing employee data from Lattice.

Note: The Lattice HRIS connection uses a secure sign-in flow managed through Merge. Drata requests read-only access to employee data via the Lattice API, and no credentials are stored in Drata.

Required Permissions for HRIS

Drata requests the following read-only scopes from Lattice HRIS to complete the sync:

  • employees:employment_details

  • employees:role_details

  • employees:personal.read

  • employees:contact_information.read

These scopes allow Drata to securely retrieve employment, role, and contact data from Lattice.

Data Synced from Lattice HRIS

Drata retrieves employee data from the Lattice /v2/employees API endpoint.

Drata Field

Lattice Field Path

Required

Personal Email

id.contact_information.personal_email

Optional

Work Email

id.contact_information.work_email

Required

First Name

id.personal.legal_first_name

Required

Last Name

id.personal.legal_last_name

Required

Manager

id.role_details.manager.email

Optional

Job Title

id.role_details.job_title

Optional

Employment Type

id.employment_details.employment_type.label

Required

Employment Status

id.employment_details.status

Required

Start Date

id.employment_details.start_date

Required

Termination Date

id.employment_details.termination_date

Optional

Additional Resources

Did this answer your question?