Hi, Is there an easy way to determine which integr...
# administration
n
Hi, Is there an easy way to determine which integrations are using a specific employee record to function? We had a NetSuite admin who recently resigned, and we need to revoke their access promptly. However, before doing so, I would like to verify which integrations are utilizing that employee’s record.
j
Couple of ideas... One thing to look at would be if there are any user access tokens for that employee. (Setup > Users/Roles > Access Tokens). May be a quick way to identify, but only if the integration is using TBA. You could also try a login audit trail to see if any logins are happening via that user from a User Agent or IP Address different from their UI logins.
n
Great. Thank you so much for your quick response!
n
You can also change their email address so that they can no longer login. Doing so will not impact the integration tokens as far as I know. But this is only good for TBA/OAuth 2
Someone please correct me if I am wrong.
r
For future reference, you 100% should use service users for any integrations and if you find you're not currently, I'd look into switching to that. It sucks that you may have to pay licensing for extra user(s) for that, but it saves a lot of headaches.
n
Thank you very much @RJMNS. Can you please let me know how to get service users?
r
oh sorry I should have clarified. By "service user", I mean generic user that has the application name somewhere in it. You set those up as an "employee" just like any other user, but with some generic email address. Then you set up the integration using that user so if someone leaves, you don't have to mess with reconnecting the integration. No special licensing around those nor do you have to tell NetSuite that you're doing this or anything. So for instance we set up an employee record with first name Service User and last name [application we're connecting]. With an email address something like svc-[application]@[yourcompany.com]. So if you were connecting to Boomi and you worked for Microsoft, it would be svc-boomi@microsoft.com. That doesn't necessarily have to be a 'real' email, though it can be useful in some instances.