Prerequisites

Ensure you have your Dayforce Admin configuring the role

Create a new user with the default role

Instructions

Step 1: Create a new user

Go to System Admin > User and select New. This username and password will be used for the Kombo connection flow.

Step 2: Configure Feature Access

Open the menu on the left of your screen click through to System Admin > Roles

Navigate to Features. Ensure HCM Anywhere and Web Services are checked

Expand Web Services and make sure that Read Data is checked. If you need to PATCH/POST data you will need the associated checkboxes marked as well

Step 3: Configure Authorizations

Navigate to Authorizations
Select Can Read for the following (only choose which is applicable for your use-case):
1. Employee Contact Information
2. Employee Contact Information - Business
3. Employee Contact Information - Personal
4. Employee Financial Information
5. Employee Key Information
6. Employee Historic Pay Information
7. Employee Pay Information
8. Employee Personal Information
9. Employee Personal Information XrefCode
10. Employee Profile – Security Settings – Role
11. Employee Properties *for custom fields
12. Employee Status Information
13. Employee Work Assignment – Primary Records
14. Employee Work Assignment – Secondary Records
15. User Information

Step 4: Configure Web Services Field-level Access

Navigate to Web Services Field-level Access
Navigate to the RESTful Services -> Human Resources -> Employee:

Enable EffectiveStart, EffectiveEnd, and XRefCode

Then, depending on your use case:

If you need names:Enable FirstName and LastName and CommonName

If you need managers:
Right-click Employee managers and Select All
If you need employment status:
Right-click Employment Statuses and Select All
Right-click Employment Status Group and Select All
If you need location information:
Right-click Locations and Select All
If you need employment information:
Enable RESTful Services > Human Resources > EmployeeWorkAssignment (and all child nodes)
If you need pay information:
Enable RESTful Services > Human Resources > EmployeeCompensation (and all child nodes)
If you need emails/contact information:
Enable Contacts and Addresses (and all child nodes) under RESTful Services > Human Resources
If you need gender:
Enable Gender
If you need marital status:
Enable MaritalStatus
If you need birth date:
Enable BirthDate
If you need start date or hire date:
Enable StartDate and HireDate and OriginalHireDate
If you need Groups:
Enable RESTful Services > Configuration > Location (and all child nodes) AND RESTful Services > Human Resources > OrgUnitInfos
If you need Time Off:
Enable RESTful Services > Human Resources > EmployeeTimeAwayFromWork (and relevant child nodes)   
If you need Custom Fields (employee properties):
Enable RESTful Services > Human Resources > EmployeePropertyValue

Step 5: Configure Org-Level Access

Navigate to System Admin > User. Please note, the user authenticating will need "Can See Self" enabled

Expand the User by clicking on the small down arrow as shown in the blue box below. Click on Location Access, + Add Location, and add the Company Level Location

Step 6 (optional): Configure Role Assignment for POST & PATCH

If you need support for writes functionality (ie POST /Time-Off), please configure the following as well
From the hamburger button in the top left of your screen, click on on System Admin > Roles
Navigate to Features. Ensure under HCM Anywhere and Web Services Patch/Post Employee Time Off is enabled

Step 7: Approve the User

Once all these steps have been complete the Dayforce administrator must approve the user.