Ask Oracle Access for Roles in NetSuite 2026.2

Ask Oracle access for roles is an Administrator-controlled setting in NetSuite 2026.2. Administrators can search for a role, grant or revoke access, review role details, and save the change. Roles do not receive Ask Oracle access by default.

TL;DR: In NetSuite 2026.2, users with the Administrator role manage Ask Oracle access. Go to Setup > Company > AI > Ask Oracle Access, search for a role, select Has access to grant access or No access to revoke it, and click Save. Every role starts with no access by default.

Key takeaways

Only users with the Administrator role can manage Ask Oracle access settings.
The navigation path is Setup > Company > AI > Ask Oracle Access.
Use Search to find a role by its name or part of its name.
Click Has access to grant access or No access to revoke it, then click Save.
Roles do not have Ask Oracle access by default.
The page displays Role Name, Access Status, Assigned Users, Bundle ID, Role Type, and Center Type.

Ask Oracle access for roles in NetSuite 2026.2

NetSuite 2026.2 lets Administrators control Ask Oracle access by role. This provides a role-based control point for organizations using NetSuite generative-AI features: access can be customized for specific roles rather than granted automatically across the account.

The default state is important. Roles are not granted Ask Oracle access by default, so an Administrator must deliberately enable the feature for each role that needs it. That approach supports access decisions based on business needs and security protocols.

For the user-facing capabilities that this setting controls, see Ask Oracle roles, explanations, feedback, and history. This article focuses on the separate task of deciding which roles can use Ask Oracle.

Who can manage Ask Oracle access?

Only users with the Administrator role can manage Ask Oracle access settings. An Administrator can open the Ask Oracle Access page, locate a role, choose its access state, and save the result.

End-user availability can change according to the role assigned to the user, but the underlying access decision remains an Administrator task. Developers and end users may be affected by the setting, while Administrators manage the role-level configuration.

Where to find the Ask Oracle Access page

Navigate to:

Setup > Company > AI > Ask Oracle Access

The Ask Oracle Access page is the interface for reviewing roles and setting their Ask Oracle access status. Use the Search field to find a specific role by entering its name or part of its name.

Before changing a setting, review the role information shown on the page. This helps distinguish similarly named roles and shows the number of users linked to the role.

How to grant Ask Oracle access to a role

Granting access is a deliberate opt-in action because roles have no Ask Oracle access by default.

Sign in using the Administrator role.
Go to Setup > Company > AI > Ask Oracle Access.
Use the Search field to find the role by its name or part of its name.
Review the displayed role information to confirm the intended role.
Click Has access.
Click Save to apply the change.

A simple example, using an illustrative role name, looks like this:

Role to update: Example Role

Navigation: Setup > Company > AI > Ask Oracle Access
Search: Example Role
Access selection: Has access
Final action: Save

After saving, review the role's Access Status on the page to confirm the selected state.

How to revoke Ask Oracle access from a role

Revocation follows the same process, but uses No access instead of Has access.

Sign in using the Administrator role.
Navigate to Setup > Company > AI > Ask Oracle Access.
Search for the role by entering its name or part of its name.
Confirm the intended role using the displayed information.
Click No access.
Click Save to apply the change.

Review Assigned Users before making a change. The value shows the number of users linked to the role and gives context for the scope of the decision.

Role information shown on the page

The Ask Oracle Access page displays the following information for each role:

Displayed information	What it tells the administrator
Role Name	Clear identification of the role.
Access Status	Whether the role has Ask Oracle access.
Assigned Users	The number of users linked to the role.
Bundle ID	The ID for an associated bundle.
Role Type	Whether the role is custom or standard.
Center Type	The user interface layout for the role.

These fields provide useful context before an Administrator selects Has access or No access. In particular, Access Status identifies the current setting, while Assigned Users shows how many users are linked to that role.

Default-deny behavior: roles start without access

No. Roles do not automatically have Ask Oracle access in NetSuite 2026.2. An Administrator must manually select Has access and click Save for each role that should receive access.

This default-deny behavior gives organizations control over who can use Ask Oracle. If a role cannot use the feature, first check its Access Status on Setup > Company > AI > Ask Oracle Access before deciding whether a change is needed.

Administrator checklist

Use this checklist for each role-level grant or revocation:

Confirm that you are using the Administrator role.
Open Setup > Company > AI > Ask Oracle Access.
Search for the intended role.
Validate Role Name, Bundle ID, Role Type, and Center Type.
Review Assigned Users.
Select Has access for a grant or No access for a revocation.
Click Save.
Recheck Access Status.

For adjacent NetSuite AI development resources, see SuiteScript 2.1 llm.getRemainingFreeUsage() syntax and the asynchronous llm.getRemainingUsage.promise() syntax.

Rollout considerations

The Managing Ask Oracle Access for Roles help topic was added in the 2026.2 update on 2026-08-17. Features might not be available immediately because of the phased rollout of NetSuite Next.

When the capability is available, the access model remains the same: roles start without access, and an Administrator manually grants or revokes access from Setup > Company > AI > Ask Oracle Access.

FAQ

Which NetSuite release includes Ask Oracle access management?

Ask Oracle access management is available in NetSuite 2026.2.

Who can grant or revoke Ask Oracle access?

Only users with the Administrator role can manage Ask Oracle access for roles.

Do roles automatically have access to Ask Oracle?

No. Roles do not have Ask Oracle access by default.

How does an Administrator change access?

Search for the role, select Has access to grant access or No access to revoke it, and click Save.

What information appears for each role?

The page displays Role Name, Access Status, Assigned Users, Bundle ID, Role Type, and Center Type.