Identify the Permission Needed for a Role/User

   
There are instances when simply referring to the NetSuitePermissionsUsage.xls spreadsheet to identify the permission we need is not enough. Either it takes time for us to find the specific permission we need or the permission is not listed at all.

Below are the steps that an Administrator can follow to easily identify the name of permission(s) that they need to remove or add to a certain role:

A. Create a custom role with no applied permission
1. Navigate to Setup > Users/Roles > Manage Roles > New.
2. Set the role name to No Permission.
3. Click Save.

B. Assign the custom role to your employee record
1. Using the Global Search field, look for your employee record and edit it.
2. Under Access tab > Roles subtab, add the No Permission role created from Step A.
3. Click Save.
4. Log out and log back in.

C. Identify the permission
1. Log in using your Administrator role.
2. Navigate to the page that you want to be accessible/unavailable for another role (e.g. navigate to Lists > Relationships > Customers to view the lists of customers).
3. Copy the URL of the page.
4. Switch your role from Administrator to No Permission.
5. Once you are logged in using the No Permission role, paste the URL obtained from Step C3 to your browser's address field.
6. Click Go or press Enter. The Permission Violation error should give you the name of permission needed to view the page.

Note:
If the error simply says "You do not have privileges to view this page" which does not specify a permission name, check if there is an Employee/Location/Class/Department/Subsidiary Restriction set for the role. For more information see Customizing or Creating NetSuite Roles.

Otherwise, check if Global Permissions is enabled and if one is set up for the employee. See Using the Global Permissions Feature for details.