SSEO - Using a Custom Role for Authentication

When configuring SuperSync Email with a custom NetSuite role, apply the following permissions precisely:

1. Transaction Permissions:

PermissionLevel
Find TransactionView
OpportunityView

2. List Permissions:

PermissionLevel
CompaniesCreate
ContactsCreate
Custom Record EntriesView
CustomersCreate
Documents and FilesEdit
EmployeesView
Employee RecordView
Perform SearchView
Record Custom FieldEdit
Track MessagesCreate

3. Setup Permissions:

PermissionLevel
Custom ListsView
Enable FeaturesFull
Log in using Access TokensFull
Set Up CompanyView

4. Custom Record Permissions:

PermissionLevel
SuperSync Email ConfigurationView
SuperSync Email Matching LogView
SuperSync Email Matching TypeView
SuperSync Email ProfileView
SuperSync Email Record FieldView
SuperSync Email Record FormView

Important – Custom Attachment Folder Setup:

Due to NetSuite's 2025.1 update restricting the native attachment folder access exclusively to the administrator role, you must move the SuperSync attachment folder when authenticating with a custom role.

Update the SuperSync Attachment Folder:

  • Navigate to the existing SuperSync Email Folder in the File Cabinet.
  • Edit the folder settings and change its Parent Folder from the current Attachment Folder to the root of the File Cabinet.



Script Deployment Permissions (RESTlet Access):

Finally, grant your custom role RESTlet access:

  1. In NetSuite, navigate to Customization → Scripting → Script Deployments.

    • RESTlet 1.0 deployment: customdeploy_scs_email2netsuite_rl
    • RESTlet 2.1 deployment: customdeploy_ng_supersync_email_rl
  2. Click Edit next to the relevant RESTlet deployment.

  3. Under the Audience subtab, locate the Internal Roles field. (in pre-2025.1, this is "Roles")

  4. Add your custom role to this field.

  5. Click Save.



Was this article helpful?