SuiteTalk (Web Services) Platform Guide - NetSuite

Roles and Permissions in Web ServicesSetting a Default Role for a Web Services User39Setting a Default Role for a Web Services UserYou can specify a default role for any user making Web services requests. The permissions forthe default role are determined as follows:• First, any role specified in the Passport object of the request is used. The role definedhere must be a valid role contained in the Employee record of the given user. (Forinformation on the Passport object, see login. The Passport object is defined in theplatformCore XSD.)• If a role preference is not set at the request level, then any default Web services role asdefined in the Web Services Preference page for the given user is used.Only one default Web services role can be assigned per user and only roles that containthe Web services permission can be specified as a default Web services role. Note thatthe user may be assigned a different role than those specified in their Employee record.In other words, a user may have greater or lesser permissions using Web services ascompared to the UI.• If neither the request nor the Web services default role is set, then the user’s default UIrole is used, provided it has the Web services permission.Note: All standard roles have the Web services permission by default when the Webservices feature is enabled. Custom roles, however, must be explicitly set to haveWeb services permissions.To set a specific default role for a Web services user:1. Click Setup > Integration > Web Services Preferences.2. Select the desired user from the Name drop-down list.3. Select the default role to use for Web services requests for this user.The internal ID for the selected role automatically populates the ID field.4. Click Add.5. Click Save.Setting a Web Services Only Role for a UserIn NetSuite you can designate a user’s role as Web Services Only. When a user logs in with arole that has been designated as Web Services Only, validation is performed to ensure that theuser is logging in through Web services and not through the UI.Note: Your account must have the Web services feature enabled for the Web ServicesOnly check box to appear. See Enabling the Web Services Feature for steps onenabling this feature.The Web Services Only role increases the security of an integrated application by prohibiting aUI user from accessing the system with permissions and privileges that are specifically createdfor a Web services applications. For example, you may have a Web services application thatSuiteTalk Platform Guide