Oracle NetSuite SuiteQL

Connect Foundry to Oracle NetSuite using the SuiteQL framework and start syncing data from your NetSuite ERP to Foundry.

Supported capabilities

Setup

1. Open the Data Connection application and select + New Source in the upper right corner of the screen.
2. Select NetSuite SuiteQL from the available connector types.
3. Choose to use a direct connection over the Internet or to connect through an agent runtime.
4. Follow the additional configuration prompts to continue the setup of your connector using the information in the sections below.

Learn more about setting up a connector in Foundry.

Authentication

The NetSuite SuiteQL source uses token-based authentication (TBA) ↗.

Configure user roles and permissions in NetSuite

Access control in NetSuite is configured via the assignment of roles to a user; each role is a collection of permissions that define what tasks the user can perform and what data they can access. We recommend the following configuration for the user that will connect to Foundry:

1. Create a dedicated role with appropriate permissions.

   1. From NetSuite’s tool bar, select Setup > Users/Roles > Manage Roles > New and provide an explicit name to the role. We recommend using foundry-role.
      • You can optionally tick the Web Services only configuration box.
   2. Add system-wide permissions to the role by navigating to the bottom of the role page and selecting Permissions > Setup. The minimal required permissions you need to add are:
      • Log In using access tokens
      • REST Web Services
      • Custom Record Type
      • Custom Field
      • Remember to Save after adding the required permissions.
   3. Add report permissions to the role by navigating to the bottom of the role page and selecting Permissions > Report. Select:
      • SuiteAnalytics Workbook,
      • Remember to Add the permissions and then Save.
   4. Add table permissions to the role for tables you want to be able to query from Foundry by navigating to the bottom of the role page and selecting Permissions > Lists. Select the tables you want, select Add then Save.

2. Assign the new role to a user.

   1. From NetSuite’s tool bar, select Setup > Users/Roles > Manage Users. Select the user you want to use to connect to Foundry, and select Edit.
   2. Navigate to the Access tab and make sure the Give Access checkbox is ticked.
   3. In the Roles tab, select the newly created role (foundry-role) from the dropdown list, select Add then Save.

To verify that you added the correct permissions, log in as the user you have assigned the new role to, and check that you can view all the data that you expect.

Configure integration and access tokens in NetSuite

Integration records are used in NetSuite to manage connections to external systems. We recommend the following configuration to connect to Foundry:

1. Create a new Integration record using TBA (see more details ↗).
   1. From NetSuite’s tool bar, select Setup > Integration > Manage Integrations > New and provide an explicit name to the integration. We recommend foundry-integration.
   2. Make sure the State is Enabled and that only Token-based Authentication is ticked. All other boxes should be unticked.
   3. After you Save, make a note of the CLIENT ID and CLIENT SECRET. You will need them to configure Foundry.

2. Create and assign a TBA token.
   1. From NetSuite’s tool bar, select Setup > User/Roles > Access Tokens > New.
      • If you can't manage tokens for other users, navigate to the bottom-left Settings panel on NetSuite's homepage and select Manage Access Tokens.
   2. Select the newly created application (foundry-integration in our example), the user to which you've assigned the newly created role (foundry-role), and the newly created role.
      • If you can't manage tokens for other users, your user will be selected by default. Make sure your user has the newly created role (foundry-role) assigned to it.
   3. After you Save, make a note of the TOKEN ID and TOKEN SECRET. You will need them to configure Foundry.

Learn more about token management in NetSuite. ↗

Networking

The NetSuite SuiteQL connector requires network access to the NetSuite instance to which you want to connect.

Option 1: Direct connection

If you are connecting via a direct connection, you will need to add the following egress policy to the source:

• <ACCOUNT_ID>.suitetalk.api.netsuite.com on port 443. You can find your account id in the url when connected to NetSuite.

If this egress policy does not exist, you can request the egress policy; otherwise, you can add the egress policy.

Option 2: Agent connection

If you are connecting with an agent runtime, you must ensure that the agent host has firewalls open to the host names, IP addresses, and ports required to connect to your NetSuite Connect instance.

Connection details

Creating a sync

The NetSuite SuiteQL source can be explored to discover tables and create new syncs. You can also manually create new syncs from the overview page of the source.