ExtendSync follows NetSuite’s Role-Based Access Control and requires specific permissions to authenticate using NetSuite’s secure Three-Step Authorization (3SA) process.
Error
If your role is missing required permissions, you may see this error:
"message": "Missing Authentication Token",
"type": "MISSING_AUTHENTICATION_TOKEN",
"statusCode": 404,
"hint": "The HTTP method or resource may not be supported."
Reason of Error
Your NetSuite role does not have the permissions required for ExtendSync to authenticate or communicate with NetSuite via API.
Resolution
Please contact your NetSuite Administrator and request the following updates to your role:
Step 1: Setup> User/Roles > Manage Roles > Customize or Edit
Step 2: Go to Permissions > Setup.
Step 3: Add the following and set to Full
SOAP Web Services
User Access Tokens
Log in using Access Tokens
Step 4: Close Outlook then relaunch app and log in to ExtendSync.
Why These Permissions Matter
ExtendSync uses NetSuite’s secure token-based 3-Step Authorization (3SA), which fully supports:
Multi-Factor Authentication (MFA)
Single Sign-On (SSO)
Any SAML-based Identity Provider, including Azure AD, Google, and Okta
This modern authentication flow ensures strong protection of your NetSuite data.
Ultimately, NetSuite security is a shared responsibility between NetSuite, your organization, your users, and the solution providers you choose to work with. When required permissions are missing, NetSuite will block authentication and return errors such as “Missing Authentication Token.”
Ensuring the correct permissions are enabled helps keep your data secure and ensures ExtendSync can operate as intended.