BambooHR Access Permissions and Sensitive Data Review (Defensive)
Check who can see pay and personal information.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it.
Review access in our HR system as a defensive review of my own organisation's data. Access levels and the people holding them: [ACCESS_LEVELS]. Sensitive data held (pay, health, performance, disciplinary, identification): [SENSITIVE_DATA]. Reports with sensitive fields and who can run them: [REPORTS]. Our policy: [POLICY]. Check for managers who can see more than their team, administrators who do not need that access, shared accounts, former staff, reports that export sensitive fields, and integrations. Rate each finding by risk, base findings only on what I describe, and list questions for the system administrator and the data protection lead. Recommend least privilege and logging, not workarounds. Return a table, a proposed access model by role, and a quarterly review. Do not ask me for personal data. This is administrative and educational support, not legal or employment advice; rules on employee data, leave, pay and discipline vary by place, so list what HR or a qualified adviser must confirm [VERIFY].
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.