SSEO - Using a Custom Role for Authentication
When configuring SuperSync Email with a custom NetSuite role, apply the following permissions precisely:
1. Transaction Permissions:
| Permission | Level |
|---|---|
| Find Transaction | View |
| Bills* | View |
| Credit Memo* | View |
| Invoices* | View |
| Item Receipt* | View |
| Opportunity* | View |
| Purchase Order* | View |
| Quote* | View |
| Return Authorization* | View |
| Sales Order* | View |
| Vendor Return Authorization* | View |
* Note: These record permissions should be granted only if your users need access to log emails into those record types.
2. List Permissions:
| Permission | Level |
|---|---|
| Companies | Create |
| Contacts | Create |
| Custom Record Entries | View |
| Customers | Create |
| Documents and Files | Edit |
| Employees | View |
| Employee Record | View |
| Partners | View |
| Projects | View |
| Perform Search | View |
| Record Custom Field | Edit |
| Suppliers | View |
| Track Messages | Create |
| Vendor | View |
3. Setup Permissions:
| Permission | Level |
|---|---|
| Custom Lists | View |
| Enable Features | Full |
| Log in using Access Tokens | Full |
| Set Up Company | View |
4. Custom Record Permissions:
| Permission | Level |
|---|---|
| SuperSync Email Configuration | View |
| SuperSync Email Matching Log | View |
| SuperSync Email Matching Type | View |
| SuperSync Email Profile | View |
| SuperSync Email Record Field | View |
| SuperSync Email Record Form | View |
Important – Custom Attachment Folder Setup:
Due to NetSuite's 2025.1 update restricting the native attachment folder access exclusively to the administrator role, you must move the SuperSync attachment folder when authenticating with a custom role.
Update the SuperSync Attachment Folder:
- Navigate to the existing SuperSync Email Folder in the File Cabinet.
- Edit the folder settings and change its Parent Folder from the current Attachment Folder to the root of the File Cabinet.
Script Deployment Permissions (RESTlet Access):
Finally, grant your custom role RESTlet access:
In NetSuite, navigate to Customization → Scripting → Script Deployments.
- RESTlet 1.0 deployment:
customdeploy_scs_email2netsuite_rl - RESTlet 2.1 deployment:
customdeploy_ng_supersync_email_rl
- RESTlet 1.0 deployment:
Click Edit next to the relevant RESTlet deployment.
Under the Audience subtab, locate the Internal Roles field. (in pre-2025.1, this is "Roles")
Add your custom role to this field.
Click Save.
