netsuite-sdf-roles-and-permissions

Validate NetSuite SDF permission keys by mapping every permkey in your customrole XML to exact IDs in references.json, ensuring standard prefixes like ADMI_, LIST_, and TRAN_ exist and are used correctly. This confirms accurate access control definitions.

The correct permission level for least-privilege NetSuite SDF roles is the minimum permlevel required for the script to execute. Assign accurate permlevels by validating standard and customrecord_* permissions against reference files.

Handle customrecord_* permissions in NetSuite SDF by validating them against your project's XML definitions rather than standard references. This distinguishes custom record IDs and ensures accurate permission mapping in customrole deployments.

Yes, NetSuite SDF permission validation works with both standard and custom permissions. It validates standard permkeys against references.json and customrecord_* IDs against project XML definitions to ensure correct access control.

A limitation of validating NetSuite SDF permissions is that some permissions exist in the reference files but are not relevant to your current project. The validation process notes these caveats to prevent unnecessary permission mappings.

NetSuite SDF customrole deployments fail with invalid permkey errors when assigned keys do not map to exact IDs in references.json or your project's customrecord_* XML definitions. Validate all permkeys against official references.