HTML Formulas in Search Enhance...

Starting in NetSuite 2025.1, the HTML Formulas in Search feature enables users with the Administrator role to grant the Create HTML Formulas in Search permission to other users. This enhancement is designed to improve security by allowing administrators to control who can insert HTML and scripts into saved searches, thereby raising awareness of potential risks associated with such actions.

Overview of HTML Formulas in Search

The integration of HTML formulas into saved searches allows for greater flexibility and customization of search results. However, with this flexibility comes the responsibility to manage security risks effectively.

Key Features

Permission Management: Admins can now assign the permission to create HTML formulas to specific users, ensuring that only qualified personnel can utilize this feature.
Security Enhancement: By limiting access, organizations can mitigate risks related to HTML and script injections, which can otherwise lead to unauthorized data access or manipulation.
User Awareness: Enhanced documentation and training can be provided to users granted this permission, emphasizing the importance of security in using HTML formulas.

Best Practices

Limit User Access: Only assign the Create HTML Formulas permission to users who need it for their role. This helps maintain a secure environment.
Regular Audits: Conduct regular audits of saved searches that utilize HTML formulas to ensure proper usage and identify any potential security risks.
Educate Users: Provide training for users on the potential risks involved with HTML and scripts and best practices for safe implementation.

Who This Affects

This feature impacts the following roles and modules:

Administrators: As the gatekeepers of permissions, they will need to understand how to effectively manage access to this feature.
Developers: Those involved in creating or modifying saved searches will benefit from the added security measures.
Users of Saved Searches: Any users who work with saved searches that contain HTML formulas need to be aware of the associated security practices.

Key Takeaways

New in NetSuite 2025.1: Admins can assign Create HTML Formulas permission.
Enhances security by controlling who can use HTML in searches.
Important for administrators and users of saved searches to adopt best practices regarding HTML formulas.

Frequently Asked Questions (4)

Do I need to enable a feature flag for the HTML Formulas in Search feature?

The article does not mention any specific feature flag that needs to be enabled for HTML Formulas in Search. This feature is introduced in NetSuite 2025.1 and may be automatically available to users with the Administrator role.

What permissions are required to create HTML formulas in saved searches?

Only users with the Create HTML Formulas in Search permission, which can be granted by administrators, can create HTML formulas within saved searches. Administrators need to manage this permission carefully to enhance security.

How does this interact with existing saved searches that do not use HTML formulas?

The article does not provide specific information about the impact on existing saved searches that do not utilize HTML formulas. However, the feature primarily enhances security and should not negatively affect saved searches without HTML.

Will implementing this feature affect existing user roles and permissions?

Yes, implementing the HTML Formulas in Search feature requires administrators to evaluate and possibly adjust existing user roles and permissions to ensure that only qualified personnel have access to create HTML formulas.

HTML Formulas in Search Enhance Security for NetSuite 2025.1