SSEO - Using a Custom Role for Authentication
When configuring SuperSync Email with a custom NetSuite role, apply the following permissions precisely:
1. Transaction Permissions:
Permission | Level |
---|---|
Find Transaction | View |
Opportunity | View |
2. List Permissions:
Permission | Level |
---|---|
Companies | Create |
Contacts | Create |
Custom Record Entries | View |
Customers | Create |
Documents and Files | Edit |
Employees | View |
Employee Record | View |
Perform Search | View |
Record Custom Field | Edit |
Track Messages | Create |
3. Setup Permissions:
Permission | Level |
---|---|
Custom Lists | View |
Enable Features | Full |
Log in using Access Tokens | Full |
Set Up Company | View |
4. Custom Record Permissions:
Permission | Level |
---|---|
SuperSync Email Configuration | View |
SuperSync Email Matching Log | View |
SuperSync Email Matching Type | View |
SuperSync Email Profile | View |
SuperSync Email Record Field | View |
SuperSync Email Record Form | View |
Important – Custom Attachment Folder Setup:
Due to NetSuite's 2025.1 update restricting the native attachment folder access exclusively to the administrator role, you must move the SuperSync attachment folder when authenticating with a custom role.
Update the SuperSync Attachment Folder:
- Navigate to the existing SuperSync Email Folder in the File Cabinet.
- Edit the folder settings and change its Parent Folder from the current Attachment Folder to the root of the File Cabinet.
Script Deployment Permissions (RESTlet Access):
Finally, grant your custom role RESTlet access:
In NetSuite, navigate to Customization → Scripting → Script Deployments.
- RESTlet 1.0 deployment:
customdeploy_scs_email2netsuite_rl
- RESTlet 2.1 deployment:
customscript_ng_supersync_email_rl
- RESTlet 1.0 deployment:
Click Edit next to the relevant RESTlet deployment.
Under the Audience subtab, locate the Internal Roles field.
Add your custom role to this field.
Click Save.