SuiteTalk (Web Services) Platform Guide - NetSuite

Chapter 4Roles and Permissions in WebServicesNetSuite provides many standard roles with predefined permissions. A role is a set ofpermissions that allows customers, vendors, partners and employees access to specific aspectsof your data. Each role grants access at a certain level for each permission.When logging in using Web services you may provide a role id along with your credentials.The role id that you provide must have Web services permissions, otherwise anINSUFFICIENT_PERMISSION error is returned. If no role id is provided, then the user’sdefault role is used. If the default role does NOT have Web services permissions, then aROLE_REQUIRED fault is returned.The following topics are provided in this section. They do not need to be read in order.However if you are new to NetSuite Web services, it is recommended that you read each topicto understand how NetSuite roles and permissions apply in a Web services context.• Role and Permission Considerations When Developing in SuiteTalk• Assigning the Web Services Permission to a Role• Setting a Default Role for a Web Services User• Setting a Web Services Only Role for a User• Customer Center, Vendor Center, and Partner Center Roles• Internal IDs Associated with RolesRole and Permission Considerations When Developingin SuiteTalkDue to SuiteTalk’s reliance on NetSuite’s role-based permissions, it is important for SuiteTalkdevelopers to put that into considerations during the design phase to ensure smoothdeployments.It is common for developers to use the administrator role during development time because itgives them full permissions and access to all the records and operations. However, the targetend users are likely to have less powerful roles, which may not have access to the data theSuiteTalk application requires.Another role-related consideration is the preferred custom forms of some roles may not haveaccess to certain fields or sublists that a SuiteTalk application requires. Hence the application’sattempts to set those fields will result in permission errors.SuiteTalk Platform Guide