SSEO - Using a Custom Role for Authentication

When configuring SuperSync Email with a custom NetSuite role, apply the following permissions precisely:

1. Transaction Permissions:

PermissionLevel
Find TransactionView
OpportunityView

2. List Permissions:

PermissionLevel
CompaniesCreate
ContactsCreate
Custom Record EntriesView
CustomersCreate
Documents and FilesEdit
EmployeesView
Employee RecordView
Perform SearchView
Record Custom FieldEdit
Track MessagesCreate

3. Setup Permissions:

PermissionLevel
Custom ListsView
Enable FeaturesFull
Log in using Access TokensFull
Set Up CompanyView

4. Custom Record Permissions:

PermissionLevel
SuperSync Email ConfigurationView
SuperSync Email Matching LogView
SuperSync Email Matching TypeView
SuperSync Email ProfileView
SuperSync Email Record FieldView
SuperSync Email Record FormView

Important – Custom Attachment Folder Setup:

Due to NetSuite's 2025.1 update restricting the native attachment folder access exclusively to the administrator role, you must move the SuperSync attachment folder when authenticating with a custom role.

Update the SuperSync Attachment Folder:

  • Navigate to the existing SuperSync Email Folder in the File Cabinet.
  • Edit the folder settings and change its Parent Folder from the current Attachment Folder to the root of the File Cabinet.



Script Deployment Permissions (RESTlet Access):

Finally, grant your custom role RESTlet access:

  1. In NetSuite, navigate to Customization → Scripting → Script Deployments.

    • RESTlet 1.0 deployment: customdeploy_scs_email2netsuite_rl
    • RESTlet 2.1 deployment: customscript_ng_supersync_email_rl
  2. Click Edit next to the relevant RESTlet deployment.

  3. Under the Audience subtab, locate the Internal Roles field.

  4. Add your custom role to this field.

  5. Click Save.



Was this article helpful?