NetSuite consultancy question: best practices for how to manage logins for clients who need ongoing support after an implementation? Ideally allowing multiple consultants to access the client's environment the easiest with minimal user seat usage ?

I generally discourage not using named logins unless specifically mandated by the client.

Multiple at once requires multiple logins.

Normally have an administrator inactivate/reactivate people as they need access

either of you tried using example+1@example.com where example@example.com is a shared outlook mailbox type deal?

Do you need to receive the emails?

Which is why it's just easier to have named logins - and use the inactive checkbox to turn people on and off as they need it.

I think Kevins solution is the best, if the client has their own administrator and can tick and peoples access on or off as required

I do most of my ongoing support after go live as webexes when possible anyways so I can show them what they should learn anyways.

But if you're expecting to be the admin on their side then you'll need one 'permanent' login on their account and I'd say thats better to be a general email rather than a user in particular

i doubt they will but i asked a similar question at suiteworld when 2fa came out and they made a fuss about sharing logins for a consultancy being against their TOS... but its a necessary evil

I mean you can get a discounted user login for a NetSuite Partner licence

My understanding is that you can get one discounted user login for partners

50% off afaik

just gotta ask the right way

good points ^ and thanks for all the input, the whole +1 thing I guess might be more of an idea for allowing the same outlook mailbox to first-time-auth user access to new env's for new clients

There are ways to do it securely - such as enforcing 2FA on the login

ive seen multiple places use a login management tool like lastpass and then a singular google voice # that emails a distro list.

I mean if you're an admin 2fa is enforced anyway, we created a solution that sent the 2fa code to a phone number, which forwarded to a group email box so people could just get the codes without everyone having unique login

that's a good one, similar idea to what might help us out