How do permissions work for Suitelet functionality? Does the user's role need to be assigned to the script audience?

AI generated answer (using internal Slack threads):

In NetSuite, permissions for Suitelet functionality are determined by the role assigned to the Suitelet deployment. If a Suitelet is set to 'Available Without Login', it can be accessed without requiring a user to log in. However, the permissions of the role assigned to the Suitelet will still apply when executing the Suitelet's script. For example, if a Suitelet tries to load a record that the assigned role does not have permission to access, an 'INSUFFICIENT_PERMISSION' error will occur. This is because the Suitelet is trying to perform an action that the assigned role does not have permission to do. To avoid this, you should ensure that the role assigned to the Suitelet has the necessary permissions to perform all the actions in the Suitelet's script. If the Suitelet needs to perform actions that should not be available to the general users, you may need to create a new role with the specific permissions needed and assign this role to the Suitelet. In some cases, you might need to call a Suitelet from another script (like a Client Script or a RESTlet) to perform actions with elevated permissions. In these cases, the Suitelet would execute as the role it's assigned to, effectively elevating the permissions for those actions. Remember, it's important to only grant the minimum necessary permissions to each role to maintain good security practices. ****** Disclaimer: This response was generated by an artificial intelligence assistant based on previous conversations from multiple Slack channels, and may contain inaccuracies or mistakes. ******

yes