NetSuite
This page outlines the process of configuring and using the NetSuite API through Zilla to sync Users, and roles.
Note: Netsuite does not provide an out of the box REST API. A REST API can be created by installing a small piece of software called “RESTlet” in your NetSuite installation. This RESTlet will create the API endpoint required for the API integration. Zilla has built a RESTlet capable of extracting accounts and roles in Netsuite. Please reach out to your Zilla Security contact for additional details.
Summary
Pre-Install
Take the following javascript code and save it into a file called ZillaUAR.js:
/**
* @NApiVersion 2.1
* @NModuleScope Public
* @NScriptType Restlet
*
*/
define(["N/search"],
function (search) {
/**
* getEmployees - gets a list of all active employees with log in access
* @returns JSON payload of employees, attributes, and roles
*
*/
function getEmployees() {
var _employeeSearchObj = search.create({
type: "employee",
filters:
[
["giveaccess","is","T"],
"AND",
["isinactive","is","F"]
],
columns:
[
search.createColumn({name: "internalid", label: "Internal ID"}),
search.createColumn({name: "externalid", label: "External ID"}),
search.createColumn({
name: "entityid",
sort: search.Sort.ASC,
label: "Name"
}),
search.createColumn({name: "email", label: "Email"}),
search.createColumn({name: "firstname", label: "First Name"}),
search.createColumn({name: "lastname", label: "Last Name"})
]
});
// var searchResultCount = _employeeSearchObj.runPaged().count;
// log.debug("_employeeSearchObj result count",searchResultCount);
var _employeeArray = [];
_employeeSearchObj.run().each(function(result){
// .run().each has a limit of 4,000 results
_employeeArray.push({
"id": result.getValue({name: "internalid"}),
"externalid": result.getValue({name: "externalid"}),
"status": "Active",
"email": result.getValue({name: "email"}),
"firstname": result.getValue({name: "firstname"}),
"lastname": result.getValue({name: "lastname"}),
"roles": getRolesByEmployee(result.getValue({name: "internalid"}))
})
return true;
});
return _employeeArray;
}
/**
* getRolesByEmployee - gets all roles assigned to a specific employee
* @param _employeeID - internal ID of the employee record
* @returns array of roles associated with the employee
*/
function getRolesByEmployee(_employeeID) {
var _employeeSearchObj = search.create({
type: "employee",
filters:
[
["internalid", "anyof", _employeeID]
],
columns:
[
search.createColumn({name: "role", label: "Role"})
]
});
// var searchResultCount = _employeeSearchObj.runPaged().count;
// log.debug("_employeeSearchObj result count",searchResultCount);
var _roleArray = [];
_employeeSearchObj.run().each(function(result){
// .run().each has a limit of 4,000 results
_roleArray.push(result.getText("role"));
return true;
});
return _roleArray;
}
return {
/* Restlet Entry Point */
get:
/**
* <function description>
* @param context
* @returns ???
*
*/
function _get(context) {
return getEmployees();
}
};
}
);
Setup in Netsuite
1. Create a Role
Go to Setup > Users/Roles > Manage Roles > New
Assign the role scopes:
Lists -> Employees
Lists -> Employees Records
Lists -> Subsidiaries
Lists -> Integration Applications
Setup -> REST Web Services
Setup -> Login Using Access Tokens
Setup -> Bulk Manage Roles
Setup -> View Login Audit Trail
Give the role access to all subsidiaries
2. Create a New User
Go to Lists->Employees->Employees->New
Enter a Name and Email
Check GIVE ACCESS in the Access subtab and assign a password to the account
Assign the Role made in the previous step to this user
3. Create an Integration in NetSuite
Go to setup->integration->manage integrations->new create a new Zilla integration
Check 'token based authentication' and 'RESTLets', uncheck 'TBA Authorization Flow' and 'authorization code grant', then save
Copy Client ID and Secret for later use
4. Create an Access Token
Go to Setup -> Users/Roles -> Access Tokens -> New
Generate a Consumer Token assigned to the user you created previously
Store the access secret and token for later use
5. Upload Script
Upload the script (Customization->Scripting->Scripts->New).
Note: Make sure the script name and name of the script deployment are the same as the name (ZillaUAR.js) of the file (include the .js).
Make the created user an owner of the script
Select Deploy Script
Add the Zilla integration Role to script deployment. Make status 'released'
Add your subsidiary to the script
Copy the External URL that appears once you save it for later use
Set up NetSuite Application Integration on Zilla:
Visit the Zilla application and login using your admin credentials and then click
Add Application
in the top right.
A window with a search bar appears, type in
netsuite
in the search bar. NetSuite application entry will appear at the top of the list, clickAdd to Applications
button to the right.
Fill in the form with appropriate details and then click
Add to Applications
button.
A detailed view of NetSuite application appears. Click
Sync now
or thegear icon
in top right corner to configure your application.
Enable API Integration option from the dialog.
Add the configuration details, check the information below this screenshot.
Enter all of your information into the corresponding fields in Zilla:
Consumer Key: Take from “3. Create an Integration in NetSuite” Section above
Consumer Secret: Take from “3. Create an Integration in NetSuite” Section above
Signature Method: value will be:
HMAC-SHA256
Realm: AccountID value found in the EXTERNAL URL value. For example, if the URL is https://123.restlets.api.netsuite.com … then the Realm value is 123.
If you’re using sandbox environment, the Realm value needs to be 123_SB (with an underscore, not a hyphen). As an example, if my external URL is https://123-sb1.restlets.api.netsuite.com… then this value needs to be 123-SB1
Users Endpoint: Taken from the Script Deployment record’s EXTERNAL URL value.
Access Token: Token ID from Create a New Access Token Section
Token Secret: Token Secret from Create a New Access Token Section
Sync permission associated to roles ? : Default is No. If set to No, it will not synchronise permissions associated with roles. If set to Yes, it will synchronise the permissions of all roles..
Once the configuration is complete click
Next/Sync Now
.
Click Next and it will begin the sync. The Click
Done
on the next pop-up that appears. After reviewing the sync summary pop-up, clickClose
.
Once the sync has been completed all accounts should appear under the
Accounts
tab.