Does anyone have advice on how to automate the creation of a custom role, and assigning a fixed set of permissions? We’re building a tool that uses Suitetalk to interface with the NS database. Asking our users to create a role manually introduces a lot of room for error considering all the scopes/permissions they need to add to that role.

You can deploy Roles with SDF

thanks @erictgrubaugh! Our current approach is asking customers to create an integration record, a role, and a user, and giving that user the role, and the role all the permissions… but it’s painful and error prone. I was reading about SDF but it wasn’t clear what kind of permissions we’d need to run the SDF scripts either. Any recommendations?

I'd probably point you to distributing as a SuiteApp using SDF and/or the SuiteApp Control Center. I don't know a ton about the latter, but folks over in #C42JX79UZ probably do.

The goal is to set a permissions user to run SuiteQL queries. Auto installation seems confusing since it requires a SOAP call, which in turn would require an integration record, no? How would you auth the call that installs the record? Either way, thanks for the pointers! I’ll head over to that channel and do some more research.

@erictgrubaugh > You can deploy Roles with SDF* *with limitations on custom fields on roles and preferred forms

This is a tough one. We've tried many different ways to solve for this, all with Pros and Cons

@darrenhillconsulting thanks! Do you know if there’s a default role that has TBA access to the SOAP/REST Suitetalk webservices? Because I can probably add that if so