> For the complete documentation index, see [llms.txt](https://kb.rezonate.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://kb.rezonate.io/core-integrations/oracle-netsuite-integration.md).

# Oracle NetSuite Integration

Integrating NetSuite expands Rezonate authorization graph visibility as well as the ability to monitor security controls for SSO-Access, Identity posture status, and more.

### Integration Steps

First, we will need to create a new custom role, to do that please follow the following steps as a NetSuite administrator:

1. On the admin page, navigate to Setup > Users/Roles > Manage Roles > New.

![](https://lh7-us.googleusercontent.com/NT8xHdjuwr9RfyZq9jkjCwat2rzObXK0JdI-L98d1N5ZlMubahiOTRrEKto3fzVsilkiUDThRK7-U9fgHxV8m8VKfMjyBix-GD4iDxAvl8Skdhp-MNCy2e8VUGGUZRjxZPOanjO0gFnFbOS-r1bwLlc)

2. Name the role “**Rezonate Integration Role**”.
3. In the permissions section, assign the following:
   1. Lists: Departments - View
   2. Lists: Employee Record - View
   3. Lists: Employees - View
   4. Lists: Events - View
   5. Reports: Account Detail - View
   6. Setup: Set Up OpenID Connect (OIDC) Single Sign-On - Full 
   7. Setup: Set Up OpenID Single Sign-on - Full  
   8. Setup: Set Up SAML Single Sign-on - Full  
   9. Setup: Two-Factor Authentication Base - View
   10. Setup: View Login Audit Trail - View
   11. Setup: View Web Services Logs - View
   12. Reports: SuiteAnalytics Connect - Read All - View
4. Save the role record.

Now we will need to create an **integration** and assign it to the role that was created: 

1. On the admin page, navigate to Setup > Integration > New.<br>

   <figure><img src="https://lh7-us.googleusercontent.com/CS0HQcmUsKR_FQ3996ZCsPZWFfLLIPlPYPhMys_QiyG4DYOFCobPIk9iII7093gLncCYok3y7lEa4XDFe0Jyo9D8x3DFcs8bete-XESM7fA9LG9cXMHnO-q-b5IJHGdyTmDtZfF_eK1UBBfeZiZT9S8" alt="" width="375"><figcaption></figcaption></figure>
2. Name the application “**Rezonate Integration”**.
3. Set the state to Enabled.<br>

   <figure><img src="/files/GIU7hn39aKRL7ARBqMQL" alt="" width="563"><figcaption></figcaption></figure>
4. In the Authentication section, configure the following:
5. Select Use Client Credentials (Machine To Machine) flow\
   ![](/files/Authl1R5HH4S08cBz6aG)
6. The application requires access to:
   1. REST Web Services
   2. SuiteAnalytics Connect
7. **After saving, take note of the ClientID and Client Secret, we will need them later.**

<figure><img src="https://lh7-us.googleusercontent.com/Iikek77d5Ucm1qAQIz5ncw5PxU3_9XZ8DSYLcV5NTY_rVcJ6-viJyjBa3i2xhO_k6ALaHggdPxESBJ1HtZ7afnO_1hRuKm4b0rHooEY50_4DHlPunFXObD7G5jWYsrzOw5u9t62ZrwwoYW2Dvcjx25U" alt=""><figcaption></figcaption></figure>

**Creating a new OAuth Client Credentials**

Now that we have the integration and role, we will need to assign a certificate and enable the OAuth M2M Authentication flow.

1. On the admin page, navigate to Setup > Integration > Manage Authentication > OAuth 2.0 Client Credentials (M2M) Setup.

![](https://lh7-us.googleusercontent.com/1KvVNX_Cczw8cLkX4KI2j7fBfcfyFqkua2NUBeqX2BdZRl3g7UZBslTNKsYMMgUelmS9VSbwRisdToMQx53EXVODOw2qa1EumcS-LIx6q6rrXT_VDwiDe9xdsaw5z0P7Ry2Az27qzfXPW9q2QCld34M)

2. Click on Create new.

![](https://lh7-us.googleusercontent.com/QTNnJG-1wfuCi1LEXFwsKVbEdr7PYkTOAprvoZ8qFwEMQioOPZzXAQ3gHwixYezi4RMy4ou-JHTkHcc2daj-aYtN1SuRuGivnyCPpD_03zFcmbPhW2JRHOm4C-Abq8UOtr471JaG57ZlbqeCMR4imYw)

3. Configure the following:
   1. Application - Rezonate Integration (the new integration record from section 2)
   2. Role - Rezonate Role (the new role from Section 1)
   3. Entity - Choose the entity in your organization that is responsible for this integration<br>
4. Upload the following certificate -
5. auth-cert.pem

{% file src="/files/PkrU7Kep5ZxFIQO0C8B2" %}

Thats it!

**Please share back with Rezonate the following information:**

* **ClientID** + **ClientSecret** as noted from the previous stage.
* **Organization ID** *(required)* - NetSuite account ID (company identifier). \
  The company parameter is a NetSuite-specific parameter. Extract only the **company ID** from `https://COMPANY_ID.netsuite.com`

<br>