Resources
How to Run a NetSuite Roles and Permissions Report
A segregation of duties review is also called an analysis or an assessment. This page uses the terms interchangeably.
The NetSuite roles and permissions report shows what every role can do, compared with the Administrator role. To run it, open Show Role Differences from the Setup menu, set the Base Role to Administrator, compare it to all roles, uncheck Only Show Differences, and export to Excel. You need this report for a segregation of duties review.
What does the report show?
1. Every role in your NetSuite account, including custom roles.
2. The permissions each role holds, compared with the Administrator role.
3. The facts you need to see what a role allows, not just what it is called.
A role name can hide a lot. The user report tells you who holds each role. This report tells you what each role can do. A segregation of duties review needs both.
How do I run it, step by step?
1. Sign in to NetSuite with an account that can view roles and role differences. This is usually a system administrator account.
2. Go to Setup.
3. Select Users/Roles, then Show Role Differences.
4. Set Base Role to Administrator.
5. In Compare To, select every role. Click the first role. Hold Shift and click the last one.
6. Uncheck Only Show Differences, so the report lists every permission, not only the ones that differ.
7. Click Show.
8. Click the Excel icon. NetSuite exports the report as an Excel workbook (.xlsx).
Your menus may use different labels. Follow the picture if they do.
What proof should I keep?
Take a screenshot while the report is still open. It must show the NetSuite web address, the date and time on your computer, and the report itself. Paste it into a new tab named Evidence Screenshot. Do not crop or blur these three things.
How should I save the file?
Save it as CompanyName_NetSuite_Role_Permission_Differences_YYYY-MM-DD.xlsx. Then check:
1. Base Role is Administrator.
2. Compare To includes every role.
3. Only Show Differences is unchecked.
4. The Evidence Screenshot tab shows the web address, the clock and the report.
5. The file opens in Excel.
Frequently asked questions
Why compare to the Administrator role?
The report needs a base to compare against. This guide uses Administrator.
Why uncheck Only Show Differences?
You want every permission listed, not only the ones that differ from Administrator.
Do I need the user report too?
Yes. The user report shows who holds each role. This report shows what each role can do.
Your next step
Download the free How to Run the NetSuite Show Role Differences Report.
Then read Part 3: How to Filter a NetSuite Permissions Report.
Part of the series How to Do a NetSuite Segregation of Duties Review Yourself.
About SOD Check
SOD Check is a technology-enabled segregation of duties diagnostic service from A2Q2 for finance and HR systems like NetSuite and Workday. Your administrator exports user, role and permission data. Our software analyzes it, experienced practitioners review the results, and you decide what to change.
Top internal controls and SOX education for growing companies.