Skip to main content
Opal natively supports an integration with NetSuite. This integration enables organizations to manage access to NetSuite roles.
Opal cannot modify Administrator roles due to NetSuite API limitations.

​
Supported resources and functionality

Opal syncs all active NetSuite roles and employees who have login access enabled (Give Access = true).

​
Getting Started

In Opal, go to the Inventory, select the +App icon, and select NetSuite.

​
1. Generate a key pair

The NetSuite integration uses OAuth 2.0 Client Credentials (machine-to-machine) with a certificate-based JWT. You need to generate a key pair and register the public certificate in NetSuite. Run the following commands to generate an EC key pair (ES256):
Keep private_key.pem — you will upload it to Opal. You will upload certificate.pem to NetSuite in the next step.

​
2. Enable required NetSuite features

  1. In NetSuite, go to Setup > Company > Enable Features.
  2. Click the SuiteCloud tab.
  3. Under SuiteTalk, check REST Web Services.
NetSuite SuiteCloud tab with REST Web Services checked under SuiteTalk
  1. Under Manage Authentication, check OAuth 2.0.
NetSuite SuiteCloud tab with OAuth 2.0 checked under Manage Authentication
  1. Save.

​
3. Create a NetSuite integration record

  1. In NetSuite, go to Setup > Integration > Manage Integrations > New.
  2. Fill in the following settings:
NetSuite integration record showing REST Web Services scope checked under OAuth 2.0
  1. Save the record. Copy the Client ID — you will need it later.

​
4. Upload the certificate

  1. Still in NetSuite, go to Setup > Integration > OAuth 2.0 Client Credentials (M2M) Setup.
  2. Set Entity to the service account user or role that Opal will authenticate as.
  3. Upload the certificate.pem file you generated in step 1.
  4. Save the record. Copy the Certificate ID — you will need it later.
Every time you regenerate the certificate, NetSuite requires a new mapping row in this setup. Ensure the new row is bound to the correct user and the Opal Integration role.

​
5. Create the Opal Integration role

Create a dedicated NetSuite role with the minimum permissions required by Opal.
  1. Go to Setup > Users/Roles > Manage Roles > New.
  2. Set the Name to Opal Integration.
  3. Under the Permissions tab, add the following permissions and save the role:
Setup Lists Reports

​
6. Assign the role to the integration certificate

  1. Go to Setup > Users/Roles > Manage Roles and open the Opal Integration role.
  2. Under the Users subtab, add the employee or service account that owns the certificate created in step 4.
Alternatively, assign the role directly on the employee record: Lists > Employees, open the employee, go to the Access subtab, and add the Opal Integration role.

​
7. Connect NetSuite in Opal

Back in the Opal New App form, fill in the following fields: Click Connect. Opal will validate the credentials and verify the Opal Integration role has the required permissions. Any missing permissions appear in the App Validations section of the app’s Setup tab.
Last modified on July 21, 2026