Required configuration settings to establish the NetSuite connection
Use the following steps to enable SuiteTalk (Web Services), SuiteScript, and SuiteBundler.
- Navigate to Setup > Company > Enable Features.
- Select the SuiteCloud tab.
- Check the following checkboxes:
- SuiteTalk (Web Services)
- SuiteScript
- SuiteBundler
- Click Save.
Required NetSuite integration app information
The integration app requires you to enter the following information from NetSuite when configuring the NetSuite connection:
- Account ID
- Role ID
- Password
The role ID is the NetSuite Internal ID of the role associated with the Account ID (User). To obtain this value you must first know the account ID associated with the user you are using for this connection. Navigate to Setup > Integration > SOAP Web Services Preferences > Account ID to obtain the value.

Once you know the account ID, navigate to Setup > Users/Roles > Manage Roles > Internal ID. The list view displays NetSuite internal IDs. You can also open the role in view mode get the ID from the URL in the browser.
Note: To enable the visibility of internal IDs in NetSuite, navigate to Home > Set Preferences > General Tab > Set Defaults, and check the Show Internal IDs checkbox.

Establish the NetSuite connection
You can establish your NetSuite account connection with integrator.io with or without administrator access.
Set up the NetSuite connection without administrator access
If you do not want to associate the administrator role with the account ID you provided when installing the integration app, you must verify that the Role ID (associated with the account ID) has the necessary permissions so the integration app can access your NetSuite account. The following section provides more details on the permission levels needed to establish a NetSuite connection for a non-administrator role.
Note: When you use the same login for multiple integration apps, NetSuite enforces concurrency governance for users and accounts shared by all the connections. Concurrency Governance limits the number of web service calls, or concurrent RESTlet requests, at a given time.
We recommend that you use separate NetSuite user accounts (email/password) for each integration app.
Set up permissions for non-administrators roles in NetSuite
Use the following steps to set up controlled access permissions in NetSuite:
- Navigate to Setup > Users/Roles > Manage Roles.
- On the Manage Roles page, find the Celigo integrator.io Full Access w/o 2FA [Locked] role and click Customize.
Add Subsidiary Restrictions
Based on the requirement, you can select accessible subsidiaries. NetSuite defaults to Selected mode, but you can select one or more required subsidiaries in the Selected Subsidiaries section. You can also choose ALL or ACTIVE or USER SUBSIDIARY.

The following table lists the required permissions you can set in the Permission tab.
Transaction tab
PERMISSION | LEVEL |
Make Journal Entry | Full |
Find Transaction | Full |
Customer Deposits | Full |
Customer Payment | Full |
Credit Memo | Full |
Invoices | Full |
Reports tab
PERMISSION | LEVEL |
SuiteAnalytics Workbook | Edit |
Lists tab
PERMISSION | LEVEL |
Accounts | View |
Contacts | Full |
Currency | Full |
Custom Record Entries | Full |
Customers | Full |
Documents and Files | Full |
Perform Search | Full |
Subsidiaries | Full |
Tax Records | Full(Account Specific- ask this permission,while Creation of Journal entry) |
Setup tab
PERMISSION | LEVEL |
Allow JS / HTML Uploads | Full |
Company Information | Full |
Custom Record Types | Full |
SOAP Web Services | Full |
Set Up Company | Full |
SuiteApp Marketplace | Full |
SuiteScript | Full |
User Access Tokens | Full |
Accounting Preferences | Full |
SuiteBundler | Full |
- Quote in Salesforce to Estimate in NetSuite Flow Permissions:
- Transaction: Estimate (Full)
Add this permission, to enable the integration app, to sync Quote in Salesforce as an Estimate in NetSuite. Otherwise, you can ignore this permission. - Item fulfillment Flow from NetSuite to Salesforce :
- Transaction: Item Fulfillment (Edit)
Add this permission, to enable the integration app, to sync the item fulfillment data from NetSuite to Salesforce. Otherwise, you can ignore this permission. - Financial Sync Flow:
- Transaction: Cash sale (Edit)
- Transaction: Cash sale refund (Edit)
- Transaction: Invoice (Edit)
- Transaction: Credit memo (Edit)
- Transaction: Customer deposit (Edit)
Add the above permissions to the user role, if you want the customer deposit, cash sale, credit memo, invoice, and cash refund information to sync data with financials in Salesforce. - SalesForce Opportunity to Netsuite Project flow:
- List: Project(Edit)
Add this permission, to enable the integration app, to sync Opportunity in Salesforce as a Project in NetSuite. Otherwise, you can ignore this permission. - Suite Bundle Permissions:
- Setup: Suite Bundler (Full)
Suite bundle permissions are only used for installing the integration app, once the integration app is installed successfully then you can remove the permissions for suite bundle in setup.
Please note, NetSuite 2018.1 release requires two-factor authentication (2FA) for the initial login of all users with the Administrator role and Full Access roles in newly provisioned accounts.
For users of the following integration apps:
- ADP - NetSuite
- Amazon - NetSuite (SuiteScript or IO)
- BigCommerce – NetSuite
- Cash Application Manager (IO)
- eBay - NetSuite (SuiteScript or IO)
- JIRA - NetSuite
- Magento 2 - NetSuite
- Salesforce Commerce Cloud - NetSuite
- Salesforce - NetSuite v1
- Salesforce - NetSuite v2
- Shopify - NetSuite
- Walmart - NetSuite
- Vendor Payment Manager
- Zendesk - NetSuite
If you are installing the integration app in an 18.1 provisioned NetSuite account, you need to install the integration app with the NetSuite connection setup with Basic authentication. The role should be a non-admin role that should not have 2FA enabled. Once the integration app is installed, switch the NetSuite connection from Basic to Token.
If you are an existing user of any of the aforementioned integration app, there is no immediate action since this feature is only applicable to accounts provisioned in 18.1 but it's highly recommended you switch the Authentication Type from Basic to Token so any future NetSuite releases will not have any impact on your integration.
If you are already using Authentication Type as Token, your integration app will remain unaffected even if you use the 2FA feature in NetSuite. Hence, you are not required to take any action.
For additional information please see the knowledge base article on Two-Factor Authentication.
Comments
1 comment
I do not see the following permissions available in Netsuite
Lists->Subsidiaries
Setup->SuiteBundler
Have these permissions been deprecated?
Please sign in to leave a comment.