CloudExtend Outlook and Excel users can authenticate with NetSuite in two ways:
Basic credentials (username + password)
Access Tokens (recommended)
Issue
When logging in for the first time, CloudExtend will:
Prompt you for your NetSuite username and password
Attempt to automatically generate a User Access Token for ongoing communication with NetSuite
If your NetSuite role does not have permission to create or use tokens, you will see this error:
You cannot continue this authorization flow. Your current role has insufficient permission. Please contact your account administrator.
Why This Happens
Your NetSuite role is missing one or both of the following required permissions:
User Access Tokens
SOAP Web Services
Without these, NetSuite blocks CloudExtend from generating the token pair needed to complete the 3-step authentication flow.
You may be able to log in temporarily using basic credentials, but this is not recommended, as it:
Increases the likelihood of NetSuite concurrency errors
Prevents CloudExtend from using secure, token-based authentication
May require reauthentication more frequently
Resolution
Ask your NetSuite Admin to enable User Access Tokens for your role:
Step 1: Go to Setup > Users/Roles > Manage Roles
Step 2: Look for the role name that you wish to edit
Step 3: Go to Permissions > Setup and set the following to FULL:
User Access Tokens
SOAP Web Services
Why Enabling User Access Tokens Helps
Once enabled:
CloudExtend will automatically authenticate using secure tokens
Token-based sessions reduce concurrency congestion in NetSuite
Login becomes faster, more stable, and more secure
You won't be repeatedly prompted for credentials
Token-Based Authentication is the NetSuite-recommended authentication method for third-party integrations like CloudExtend.
Still Having Trouble?
If the error persists:
💬 Start a chat using the icon at the bottom-right
📧 Email cloudextend-support@celigo.com
Please include:
Your NetSuite Role
Screenshot of the error
Whether you have User Access Tokens + SOAP Web Services permissions enabled