Developer Tool Roles and Permissions in NetSuite

TL;DR Opening

Your role and its associated permissions are critical when utilizing the Commerce developer tools in NetSuite. Users must have appropriate roles to fetch and deploy files securely, particularly under the mandatory two-factor authentication (2FA) requirements.

What Are Developer Tool Roles?

In NetSuite, the roles determine what actions users can perform within the Commerce developer tools. Key aspects include:

• Fetching and Deploying Files: Users must have a role with the permission to both fetch from and deploy files to NetSuite.
• Mandatory 2FA: Since NetSuite 2018.2, all accounts are required to use two-factor authentication. This enhances security by requiring token-based authentication for fetch and deploy operations.

Setting Up Permissions

To operate with the Commerce developer tools:

1. Ensure you have a role with permissions to fetch and deploy files.
2. The default roles that provide these permissions include the Administrator and SCDeployer roles.
3. If custom roles are needed, NetSuite administrators can create them with the appropriate permissions.

Creating a Custom Role

To create a role suitable for developer tasks:

• Navigate to Setup > Users/Roles > Manage Roles > New.
• Fill out the Role record, ensuring to assign appropriate permissions under the Permission tab, such as:

  Field Name	Type	Description
  Lists	Full	Access to all list records
  Documents and Files	Full	Upload capabilities for files
  SuiteScript	View	Script viewing permissions
  Access Token Management	Full	Manage tokens for authentication

• Save the new role and assign it to the necessary employee records.

Necessary Permissions for Fetching and Deploying

If using a role like SCDeployer, ensure that it has the same permissions settings as any custom roles. This is crucial for fetching and deploying without issues. Here are some essential permissions to include:

• Documents and Files - Full
• Custom Record Entries - Full
• SuiteScript - Full
• SOAP & REST Web Services - Full

Best Practices

• Regularly review permissions to ensure compliance with security standards.
• Use token-based authentication to enforce 2FA for enhanced security during file operations.

Who This Affects

This information is relevant for:

• NetSuite Administrators: Responsible for setting up user roles and permissions.
• Developers: Who require role access to fetch and deploy files effectively using developer tools.

Key Takeaways

• Appropriate roles and permissions are essential for security in NetSuite.
• Two-factor authentication is mandatory for accounts since version 2018.2.
• Default roles like Administrator facilitate file management, but custom roles can be created as needed.

Source: This article is based on Oracle's official NetSuite documentation.