how to track role permission changes

AI generated answer (using internal Slack threads):

To track role permission changes in NetSuite, you can use the following methods: 1. Role/Permission Reports: You can generate two reports - one for roles/permission combination (compare roles) and the last update would be a system notes search. You can find this in the 'Roles' page which shows all your roles and the permissions assigned to them. 2. Saved Search for Roles: If you have made changes to your existing roles and added or removed permissions, these changes are shown under the history subtab rather than the system notes. You can pull this information using a saved search for Roles. 3. Role Differences: You can perform an initial analysis by going into Setup->Users/Roles->Show Role Differences. Use the admin role as the base role and select all the roles on the multi-select box to compare to. Uncheck the 'only show differences' option. From that, you can download a pseudo Excel-formatted file. 4. Third-Party Tools: There are third-party tools like Strongpoint.io that log all changes to roles and other metadata so you can see a diff for each change and you’ll get more detail than what’s in system notes. Remember to customize the standard NetSuite roles for CEO, CFO, etc as these roles permit more than what should be allowed for C-suite level people. They should only be read-only for most permissions especially as it relates to master records and transactions. Also, ensure that those responsible for creating and updating master records do not have permissions to create and update transaction records and vice versa. Lastly, make sure that no role has full permissions unless that's the only permission level that can be granted. Full allows record deletions. ****** Disclaimer: This response was generated by an artificial intelligence assistant based on previous conversations from multiple Slack channels, and may contain inaccuracies or mistakes. ******