Doing a sandbox refresh, users currently do not have access to production and only sandbox. How can their access be maintained after the refresh without having to reset their passwords?

AI generated answer (using internal Slack threads):

****** Disclaimer: This response was generated by an artificial intelligence assistant based on previous conversations from multiple Slack channels, and may contain inaccuracies or mistakes. ****** When you refresh a Sandbox in NetSuite, it mirrors the current state of your production environment. This means that any users who are not in the production environment at the time of the refresh will not be in the Sandbox after the refresh. If a user only has access to the Sandbox and not the production environment, their access will be lost after the refresh. This includes their password, which will not be preserved. After the refresh, you will need to recreate their employee record in the Sandbox, grant them access, and assign them a role. They will then need to set up their password again. However, if a user has access to the production environment, their access will be preserved in the Sandbox after the refresh. They will not need to reset their password and can continue to log in using their existing credentials. As for automatically pushing new employees created in production to Sandbox accounts, this is not possible. A refreshed sandbox would bring the records over but the access would be determined by your settings. Some admins only bring access to the sandbox to ADMINs only.