SuiteTalk (Web Services) Platform Guide - NetSuite

Web Services SecurityAuthorization79Important: Users who send request level credentials in a search request must use thesearchMoreWithId operation to paginate through search results. SeesearchMoreWithId for more information.AuthorizationAuthorization is the process of ensuring that the requester has the appropriate entitlement toperform the requested operation. When users request to be authenticated, they also providetheir NetSuite role. For every Web services request, the system uses the role definition toensure that the user has the required permission for the requested operation as well as therequested record type. The role must be provided in the Passport type via the login operation:Examplejblow@webservices.commypassword555555For detailed information on NetSuite roles and permissions and how the SuiteTalk implementsroles and permissions rules, refer to Roles and Permissions in Web Services.Session ManagementAfter a user has been successfully authenticated using the login operation, a sessionID iscreated that must be passed to each subsequent request. Additional logins are not required aslong as the session is active.In NetSuite, sessions management includes:• Session Timeouts• Session Limits• Manually Managing Cookies• Reusing Session IDs During LoginImportant: The following topics pertain to sessions that have been initiated using thelogin operation. Users who authenticate to NetSuite by submitting theircredentials in the SOAP header of their request should see AuthenticationUsing Request Level Credentials.SuiteTalk Platform Guide