ANS-1054 · ONEWORLD & MULTI-SUBSIDIARY
How to Restrict NetSuite Administrator Role Assignment by Subsidiary?
Implement a custom scripted solution in NetSuite to delegate role allocation responsibilities to specific administrators based on subsidiary, enhancing security and control.
Short answer
To separate administrator responsibilities by subsidiary in NetSuite, implement a small scripted solution. This involves nominating specific users for role allocation per subsidiary, associating these administrators with applicable roles via a custom record, and using a 'before submit' script on the employee record to validate role assignments against this custom record list. Role creation and editing remain centralized.
Scenario
Organizations often require a granular approach to user management, where certain administrators are authorized to assign roles only for specific subsidiaries or regions. This necessitates a mechanism to prevent administrators from assigning roles outside their designated scope, while centralizing the overarching management of role creation and editing.
Solution
A scripted solution can be implemented to enable nominated administrators to assign only specific roles, with all role creation and editing managed centrally. The solution involves the following steps:
Identify and nominate specific users who will administer role allocation (not creation) for each subsidiary or region.
Create a custom record to associate each nominated administrator user with the specific role(s) applicable to their designated subsidiary.
Develop a script that is triggered 'before submit' on the employee record. This script validates any role being assigned to an employee against the custom record list, ensuring that the assigning administrator is authorized for that specific role and subsidiary.
Expert NetSuite Support
Need help with this NetSuite issue?
OneWorld & Multi-Subsidiary consulting and configuration support