---
title: Step 14: NetSuite Role Permission Setup
slug: commercebank/step-14-netsuite-role-permission-setup
description: We apologize, but without any provided information, we are unable to generate an SEO description for the document. Could you please provide some details or points to summarize?
docTags: bSho0M8HRjDvZq9EBIWDy
createdAt: 2022-08-02T17:49:44.000Z
---

If you receive an "INSUFFICIENT\_PERMISSION" error or can't see all the accounts, it's because your NetSuite user role does not have the correct permissions. You'll need to update your permissions following these steps.

***

## Update Role Permissions

The Administrator has full access to the plugin features. To set permissions for user roles, follow these steps.

::::WorkflowBlock
:::WorkflowBlockItem
### Go to Manage Roles

Go to **Setup → Users/Roles → Manage Roles**.

::Image[]{src="https://api.archbee.com/api/optimize/MM6nC_bKbIkwCRqiFZqEu/vDWXOMDFIXMnuVVUL1Dfw_image.png" size="80" width="800" height="614" caption="Go to Manage Roles" position="center" darkWidth="800" darkHeight="614" showCaption="true"}

On the Manage Roles page, click **Edit** beside the role of choice.
:::

:::WorkflowBlockItem
### Add List Permissions 

After selecting **Edit**, go to **Permissions → List**. 

Click the dropdown in the last row of the Permissions table. 

::Image[]{src="https://app.archbee.com/api/optimize/MM6nC_bKbIkwCRqiFZqEu/0hplejIYQthq2Of4p6-rQ_image.png" size="80" width="2240" height="512" position="center" caption=""Lists" Permissions" darkWidth="2240" darkHeight="512" showCaption="true"}

Scroll through the list, or begin typing to find and select the following permissions: 

- **Accounts (Level: View):** Required to access the chart of accounts to fulfill the payment request.
- **Currency (Level: View): **Required to load the table of open bills on the Bill Payments page.
- **Customers (Level: View): **Required to load the Positive Pay page of the plugin.
- **Documents and Files** **(Level: View):** Required to access plugin pages and scripts to run and display the plugin. 
- **Vendors** **(Level: View):** Required to load vendor bills on the plugin pay page. 
- **Employee Record (Level: View): **Required to view transactions on the Bill History page and to load employee expense reports on the Expense Reports page.
- **Subsidiaries** **(Level: View):** Required to add and view subsidiaries as a column option when customizing the Pay Vendor Bills page. 
:::

:::WorkflowBlockItem
### Add Setup Permissions

Next, click **Permissions → Setup**. 

Click the dropdown in the last row of the Permissions table. 

::Image[]{src="https://app.archbee.com/api/optimize/MM6nC_bKbIkwCRqiFZqEu/JSjA4DcsvqnUGrGi3Uke2_image.png" size="80" width="2142" height="752" position="center" caption=""Setup" Permissions" darkWidth="2142" darkHeight="752" showCaption="true"}

Scroll through the list, or begin typing to find and select the following permissions:

- **Accounting Lists** **(Level: View):** Required to be able to use the Pay Bills page. 
- **Custom Fields** **(Level: View):** Required to pull in custom fields from the Bill record, which are then used for customizable columns on the Pay Vendor Bills page. This is necessary for the Pay Vendor Bills page to load if a user has any customizations.
- **Custom Lists** **(Level: Full):** Required to load the available payment methods from your bank on the Pay page. 
- **SuiteScript (Level: View):** Required to check if there are currently payments being processed. 
- **SuiteScript Scheduling** **(Level: Full): **Required to schedule payments for processing.

Select **Save.**
:::
::::

## Grant View-Only Access

:::hint{type="info"}
**NOTE: **This section is only applicable to permissions for pages under **Accounts Payables (New)** tab in the Commerce Connections plugin.
:::

By default, users with the permissions to the Commerce Connections plugin Suitelets have full access to create, edit, and manage data on the plugin pages. If you need certain roles to have view-only access (they can see data but cannot make changes), follow these additional steps.

### Supported Pages

- **Payments** - Users can see bills but cannot submit payments
- **Payment Methods** - Users can view vendor payment info but cannot edit
- **Expense Reimbursements** - Users can see reports but cannot process them

### Configuration Steps

1. Go to **Setup → Users/Roles → Manage Roles** and open the role
2. Scroll to **Permissions** tab → **Custom Record** subsection
3. Click **Add** to add a new permission line
4. In "Record Type", select the appropriate custom record:

| **Record**                           | **Level** | **Page**               |
| ------------------------------------ | --------- | ---------------------- |
| Commerce Bank View Only: Payments    | View      | Payments               |
| Commerce Bank View Only: Pay Methods | View      | Payment Methods        |
| Commerce Bank View Only: Exp Reimb   | View      | Expense Reimbursements |

5. **Set permission level to View** (not Create, Edit, or Full)

:::hint{type="warning"}
**NOTE:** If you grant any other level (Create, Edit, or Full), the plugin will provide full access. To restrict access to view-only, the permission level must be set to View.
:::

6. Repeat for additional pages if needed
7. Click **Save**

::Image[]{src="https://api.archbee.com/api/optimize/MM6nC_bKbIkwCRqiFZqEu/4b8TXFSk0hfmuwot2mdaz_viewonlypermission.jpg" size="80" isUploading="false" position="center" width="800" height="408" darkWidth="800" darkHeight="408" alt="Granting View-Only Access" showCaption="false"}

### What Changes

**View-only users CAN:** View data, use filters, search, export
**View-only users CANNOT:** Submit payments, edit records, approve, or change data

### To Remove View-Only Access

1. Go to the role's **Permissions** tab → **Custom Record** subsection
2. Find the view-only custom record permission line
3. Change level from "View" to another level, or delete the line entirely
4. Click **Save**