Separate Administration Permissions...

TL;DR Opening

You can assign several setup-type administration permissions to users without giving them Administrator roles, enhancing security and reducing reliance on administrators in NetSuite.

What Are Separate Administration Permissions?

In NetSuite, separate administration permissions allow you to delegate certain setup-related tasks to users who do not have the full Administrator role. This approach not only distributes administrative duties more evenly within your organization but also limits sensitive access. Assigning setup permissions can significantly reduce the necessity for multiple Administrator roles while maintaining control over various functions.

Available Setup Permissions

The following setup permissions can be granted:

Permission	Description
Enable Features	Allows enabling/disabling features in the system.
Set Up Company	Grants access to configure company settings.
View Billing	Enables user to access billing information.
View SOAP Web Services Logs	Allows viewing logs for SOAP Web Services.
Integration Application	Provides access to manage integration applications.
SuiteScript Scheduling	Grants ability to schedule SuiteScripts executions.

These permissions can be configured within the role record’s Permissions Setup tab.

Utilizing Core Administration Permissions

If you need a role similar to the standard Administrator role but with restricted access to sensitive information, consider using Core Administration Permissions. This set of permissions mimics the functionalities of the Administrator role but can be customized to limit access to other sensitive areas. For instance, it allows creating a role for IT administrators who handle general administrative tasks without exposing them to confidential employee information.

Caution with Core Administration Permissions

Assigning a role with Core Administration Permissions should be done thoughtfully, as it can grant capabilities that are close to those of the full Administrator role.

Who This Affects

The following roles may find this feature impactful:

Administrators: Can delegate tasks effectively without creating excess Administrator roles.
IT Staff: Enable roles that restrict sensitive access yet retain essential administrative capabilities.
Security Compliance Managers: Ensure that administrative access is appropriately restricted and managed.

Key Takeaways

Enable setup-type permissions to non-Admin users to distribute administrative tasks.
Core Administration Permissions can closely replicate the Admin role with restrictions.
Configure permissions effectively using the Permissions Setup tab to enhance system security.

Source: This article is based on Oracle's official NetSuite documentation.

Frequently Asked Questions (4)

What setup permissions can be assigned without granting full Administrator access in NetSuite?

The available setup permissions include Enable Features, Set Up Company, View Billing, View SOAP Web Services Logs, Integration Application, and SuiteScript Scheduling. These can be assigned through the role record's Permissions Setup tab.

How do Core Administration Permissions differ from the full Administrator role?

Core Administration Permissions mimic the functionalities of the standard Administrator role but are customizable to limit access to sensitive areas, allowing tasks to be delegated without exposing users to confidential information.

How should organizations handle assigning Core Administration Permissions?

Organizations should assign Core Administration Permissions thoughtfully, as they can grant capabilities close to those of a full Administrator role, enabling essential tasks while avoiding exposure to sensitive data.

Where can setup-type permissions be configured for different roles in NetSuite?

Setup-type permissions can be configured within the role record’s Permissions Setup tab, allowing administrators to assign specific permissions to users without granting them full Administrator roles.

Separate Administration Permissions in NetSuite Security