Required Features and Permissions for NetSuite AI Connector

To successfully utilize the NetSuite AI Connector Service, it is crucial to enable specific features in your NetSuite account. This includes navigating to Setup > Company > Enable Features, then selecting the SuiteCloud subtab, where you must enable the following features:

• Server SuiteScript
• OAUTH 2.0

Important Compliance Note

If you are a healthcare customer operating under a signed Business Associate Agreement (BAA), please note that the NetSuite AI Connector Service cannot be activated as it has not been evaluated for compliance with the US Health Insurance Portability and Accountability Act (HIPAA). If you have questions about this, it is best to consult your NetSuite representative.

Role Permissions

For roles that should access the NetSuite AI Connector Service, you must assign appropriate permissions. This involves the following steps:

1. Navigate to Setup > Users/Roles > Manage Roles.
2. Edit each role that needs access to the AI Connector Service.
3. Under the Permissions > Setup subtab, add:
   • MCP Server Connection
   • Log in using OAuth 2.0 Access Tokens (note it should not be confused with the Log in using Access Tokens permission).

Security Considerations

For security reasons, it is important not to run the NetSuite AI Connector Service while logged in as an Administrator or other roles that have extensive permissions across NetSuite features. This helps mitigate risks arising from potential vulnerabilities in external AI clients.

Additional SuiteApp Requirements

If you're considering installing the MCP Standard Tools SuiteApp along with the AI Connector Service, you need to enable the REST Web Services feature. Furthermore, the roles using this SuiteApp must have the REST Web Services permission. This will enable users to create, retrieve, and update records within NetSuite through the SuiteApp, promoting seamless integration with your existing workflows.

For comprehensive capabilities using the MCP Standard Tools SuiteApp, roles assigned the MCP Server Connection permission can perform actions across any records accessed through REST, assuming their current permissions allow it. Therefore, it is wise to review which users possess this permission and confirm that their roles are designed correctly for intended AI client interactions.

Summary

In summary, ensuring that the right features and permissions are enabled for the NetSuite AI Connector Service is essential for effective operation and compliance. Pay close attention to user roles and security protocols to maintain a secure environment while leveraging AI integrations effectively.

Who This Affects

• Administrators
• Developers
• Users utilizing the NetSuite AI Connector Service

Key Takeaways

• Enable Server SuiteScript and OAUTH 2.0 for the AI Connector Service.
• Healthcare customers under a BAA cannot activate the AI Connector.
• Assign required permissions to roles using the AI Connector Service carefully.
• Avoid running the AI Connector with high-permission user roles.
• Enabling REST Web Services is essential for MCP Standard Tools SuiteApp functionality.