X-posting from <#CKMKB8QQP|>, since it sounds like...
# sdfa
Avy Faingezicht
10/27/2023, 3:49 AMX-posting from #CKMKB8QQP, since it sounds like SDF might be the answer to my problems. Thoughts on how to set up permissioning for an external application that reads from customers’ NS via REST? https://netsuiteprofessionals.slack.com/archives/CKMKB8QQP/p1698363914631529
a
Anthony OConnor
10/27/2023, 4:04 AMif you can setup the role once in a NetSuite account you can export the role definition as XML via SDF which you can then install in any other account using SDF but you will need a role with SDF access in the account to set it up
👀 1
a
Avy Faingezicht
10/27/2023, 4:06 AMThanks @Anthony OConnor! Asking a user to set up a role that gives us SDF access seems like an easier ask than a role with N different scopes. That’s an interesting idea. Any pointers to docs about the XML bit?
a
Anthony OConnor
10/27/2023, 4:08 AMXML is just the format used by SDF for configuration, there's literally a button in the UI to export as XML so once you have the role setup as needed just click the button
Anthony OConnor
10/27/2023, 4:09 AMI'm not an expert on the scopes stuff you're talking about that doesn't generally sound like something we'd have in a NS role... but maybe just a nomenclature difference, we'd call them permissions in NS
a
Avy Faingezicht
10/27/2023, 4:10 AMYeah, I think it’s just naming - I mean the N different permissions that a role would need to be assigned.
a
Anthony OConnor
10/27/2023, 4:11 AMits pretty standard for NS customers to setup an "Integration User" type role though, its unlikely most of the your customers are setting up their very first NS integration with a 3rd party
Anthony OConnor
10/27/2023, 4:12 AMso this feels a little bit like a solution looking for a problem 😉
a
Avy Faingezicht
10/27/2023, 4:12 AMRight, so we’d want to ensure that role/user has the specific set of permissions we require (ie, it’s possible they could be missing
Manage Accounting Periodsa
Anthony OConnor
10/27/2023, 4:13 AMright, depending what you're needing maybe there's some pretty non-standard stuff in there
a
Avy Faingezicht
10/27/2023, 4:14 AMexactly, so given a user/role we’d want to ensure we can configure it for our customers without their NS admin having to do it manually
Avy Faingezicht
10/27/2023, 4:14 AMor maybe if the user/role has X and Y but not Z being able to tell them “hey we need you to add Z”
a
Anthony OConnor
10/27/2023, 4:14 AMyeah seems like SDF would be able to do that for you no problem, have the admin give you dev team admin for 30 mins, do the SDF deployment of the role... and you're done 🙂
Anthony OConnor
10/27/2023, 4:15 AMi guess they'd have to assign the role to the user and setup tokens or whatever, or you could also make that part of your process once the role is deployed
a
Avy Faingezicht
10/27/2023, 4:16 AMyeah, asking for tokens is easier, but setting up the ~100 permissions is harder. We’re trying to keep the list of permissions as narrow as possible.
👍 1
Avy Faingezicht
10/27/2023, 4:18 AMLooking at the “Setup > Roles > Manage Roles > <specific role from list>” it doesn’t look like there’s an export xml button there. Is that within an SDF specific menu?
a
Anthony OConnor
10/27/2023, 4:13 PMsorry its not a button, its the actions drop down.
🙌 1