Before users can sign in to ExtendInsights, a NetSuite Administrator must enable the required NetSuite features and assign the necessary permissions to each role that will access ExtendInsights.
Before You Begin
Verify that:
You have the Administrator role in NetSuite.
Your organization has an active ExtendInsights subscription or trial.
You know which NetSuite roles will be used to access ExtendInsights.
Step 1: Enable Required NetSuite Features
Go to Setup → Company → Enable Features
Open the SuiteCloud tab
Enable the following:
SOAP Web Services (SuiteTalk)
Token-Based Authentication (Manage Authentication)
Click Save
Step 2: Verify the Role Is Not “Web Services Only”
Go to Setup > Users/Roles > Manage Roles.
Validate if the Web Service Only Role is OFF.
Important
Roles marked as Web Services Only cannot sign in to ExtendInsights.
Step 3: General Permissions to be set per Role
For each NetSuite role that will access ExtendInsights:
Go to Setup > Users/Roles > Manage Roles.
Edit the role.
Under Permissions > Setup, add the following permissions. Permissions > Setup Tab
Permission | Details / Purpose |
SOAP Web Services | Required for API communication between CloudExtend and NetSuite. |
User Access Tokens | Required to generate tokens automatically during login. |
SAML Single Sign-On | Enable only if your company uses SSO (Okta, OneLogin, Microsoft Entra ID, etc.). |
Allow JS/HTML Uploads | Required for users uploading |
Log in using Access Tokens | Adds additional token authentication capability. |
Step 4: Add Custom Field Permissions (If Applicable)
If users will work with NetSuite custom fields, assign the appropriate custom field permissions to each role.
Step 5: Grant Analytics Permissions (Analytics Edition Only)
Skip this step if your organization uses Data Management only.
Under Permissions > Lists, add:
Permission | Level | Details / Purpose |
Persist Search | Create access level | Enables the search to run in the background for up to 3 hours, which is essential for preventing timeouts on large data exports. |
Perform Search | View access level (minimum) | This permission is the baseline requirement to run any search, ensuring the user has authorized access to the record types being exported. |
Permissions → Lists
These permissions allow ExtendInsights Analytics to run and save NetSuite searches.
✅ Verification
After completing these steps:
Required SuiteCloud features are enabled.
Roles are not configured as Web Services Only.
Required Setup permissions have been assigned.
Analytics permissions have been added (Analytics Edition only).
Users can sign in to ExtendInsights successfully.
💡 Best Practices
Create a dedicated ExtendInsights role whenever possible instead of modifying existing production roles.
Grant only the permissions required for the user's job responsibilities.
Review custom field permissions whenever new customizations are introduced into NetSuite.