SuiteTalk (Web Services) Platform Guide - NetSuite

Roles and Permissions in Web ServicesCustomer Center, Vendor Center, and Partner Center Roles40requires certain employees to have write access to several records. However, you want toprohibit the employees from being able to edit these records directly from within the NetSuiteUI. If you assign the Web Services Only role to specified employees, the employees can log in toNetSuite and access the application through Web services, however, the employees cannotswitch to their other roles within the system and write/edit/delete these any data-sensitiverecords.Important: The Web Services Only role does not appear in the Change Role drop-downlist. Therefore, users cannot change their roles from their original UI login role(A/P clerk, for example) to their Web Services Only role from within the UI.To designate a role as Web Services Only:1. Click Setup > Users/Roles > Manage Roles.2. On the Manage Roles list page, select Customize next to the role you want to set asWeb Services Only.3. Select the Web Services Only Role check box.4. Click Save.When to Set the Web Services Only RoleA role should not be designated as Web Services Only until the developers building and testingthe integrated application have completed the application. Waiting to designate a role as WebServices Only allows developers to go back and forth during design and development time totest the permissions for the role that is designed specifically for an integrated application. Oncethe development and testing is complete, the developer can set the Web Services Only role toTRUE for a specified role to prevent users with this role access to the UI with this set ofpermissions and privileges.Note: External roles such as Customer Center, Partner Center, Advanced Partner Center,Vendor Center, and Employee Center should not be customized to have WebServices Only permissions.Customer Center, Vendor Center, and Partner CenterRolesThe Customer Center, Vendor Center, and Partner Center roles have implicit Web servicespermissions. This allows integration with an externally hosted Web site where a client canexecute any task available under the center-specific role through Web services. For example,the client could login and submit an order on behalf of the customer.Note: It is not recommended that you customize Customer Center, Partner Center, orPartner Center Roles to have only Web Services Only permissions. For informationon the Web Services Only role, see Setting a Web Services Only Role for a User.If you choose you can remove Web services permissions from the Customer Center, VendorCenter, and Partner Center roles.SuiteTalk Platform Guide