Nailing your Pigment Role Permissions in NetSuite

Before you start : This article provides tips and tricks for you to complete in both NetSuite and Pigment to quickly configure a Pigment NetSuite role that has the rights to read a specific dataset . Keep in mind that the full set of permissions required to access saved search data is custom for each customer and is your responsibility as the NetSuite Admin. If after following the steps below, you are unable to see your complete saved search results in NetSuite, contact your internal NetSuite administrator for further help.  

Step 1: Actions in NetSuite

In order to configure the NetSuite connector, It’s important to complete all required prerequisites in NetSuite, including creating a Pigment role with sufficient read permissions to the data you are importing into Pigment.  Once the role is configured and data access is validated in NetSuite, you can configure the Pigment connector.

Step 1: Duplicate an existing Role that has  Sufficient access to enable you to read Access to the Data

Tip: Before you duplicate the role you decided to use as a baseline, log in using the selected role and double check that you are able to see all data in NetSuite by querying a saved search. 

Log in to NetSuite & navigate to Roles

1. Log in to NetSuite with a role that has permissions to view and create roles.
2. Navigate to Setup > Users/Roles > Manage Roles.
3.  Duplicate a Role that already has enough read access to all data you need to see in your saved searches 
4. Locate the role you want to use as a baseline.
5. Click View next to the role.
6. In the role detail page, select Duplicate*.
   This  a copy of the role, retaining all its permissions, preferences, and settings.
7. Update the role name and description.
   We recommend you call it Pigment Role to be able to retrieve it.

Step 2: Assign the New Role to the Pigment User

1. Navigate to Setup > Users/Roles > Manage Users.
2. Edit the user to which you want to assign the new role.
3. Under the Access sub-tab in the Roles section, add and save the new custom role. 

Step 3: Validate the User’s  data Access in NetSuite: 

• The best way to validate whether the user has sufficient access is to assign the new role to yourself. This allows you to impersonate the Pigment User and confirm if the user is set up with sufficient access for the next configuration steps
• If when logging in using the Pigment Role, the saved search total records do not match what you are able to see as an Admin, use NetSuite’s role comparison feature. This feature allows you to identify gaps between the role configured for Pigment, and an existing one with full access to data. The key is to filter the outputs on the records where the Pigment role’s permissions are equal to “None” and do not match the reference role. By turning those into “View”, you should be able to cover all gaps. 

By using an existing role as a baseline, you save time and ensure that the new role retains the essential permissions of the original role while allowing you to customize it further to fit specific needs. Remember to always test the new role to ensure it functions as intended before loading data into Pigment!