# NetSuite Role Permission Matrix Worksheet

> Source: https://netray.co/tools/netsuite-role-permission-matrix-worksheet
> Publisher: Netray (netray.co), AI and integration engineering for ERP and manufacturing systems.
> Section: Free Tools

## Short answer

An editable worksheet that records which role holds which permission level on each record area and scores the access risk for review.

## Category

netsuite

## Erp

NetSuite

## Audience

- NetSuite administrator
- Internal auditor
- Controller

## Tool

**Kind:** worksheet

**Mode:** editable

**Columns:**

#### Role

**Key:** role

**Type:** text

#### Record or permission area

**Key:** area

**Type:** text

#### Permission level

**Key:** level_name

**Type:** select

**Options:**

- None
- View
- Create
- Edit
- Full

#### Level score (0 to 4)

**Key:** level

**Type:** number

**Help:** None 0, View 1, Create 2, Edit 3, Full 4

#### Sensitivity (1 to 3)

**Key:** sensitivity

**Type:** number

**Help:** 1 low, 2 medium, 3 financial or master data

#### Risk score

**Key:** risk

**Type:** number

**Expr:** level * sensitivity

#### Reviewer

**Key:** owner

**Type:** text

#### Last reviewed

**Key:** reviewed

**Type:** date

**Rows:**

**Role:** Accounts Payable Clerk

**Area:** Vendor Bill

**Level name:** Full

**Level:** 4

**Sensitivity:** 3

**Owner:** Controller

**Reviewed:** 2026-09-30

**Role:** Accounts Payable Clerk

**Area:** Vendor Record

**Level name:** Edit

**Level:** 3

**Sensitivity:** 3

**Owner:** Controller

**Reviewed:** 2026-09-30

**Role:** Buyer

**Area:** Purchase Order

**Level name:** Full

**Level:** 4

**Sensitivity:** 2

**Owner:** Purchasing manager

**Reviewed:** 2026-09-30

**Role:** Buyer

**Area:** Vendor Record

**Level name:** View

**Level:** 1

**Sensitivity:** 3

**Owner:** Purchasing manager

**Reviewed:** 2026-09-30

**Role:** Production Planner

**Area:** Work Order

**Level name:** Full

**Level:** 4

**Sensitivity:** 2

**Owner:** Operations manager

**Reviewed:** 2026-09-30

**Role:** Warehouse Clerk

**Area:** Inventory Adjustment

**Level name:** Create

**Level:** 2

**Sensitivity:** 3

**Owner:** Inventory controller

**Reviewed:** 2026-09-30

**Role:** Sales Rep

**Area:** Sales Order

**Level name:** Create

**Level:** 2

**Sensitivity:** 2

**Owner:** Sales operations

**Reviewed:** 2026-09-30

**Role:** Administrator

**Area:** Journal Entry

**Level name:** Full

**Level:** 4

**Sensitivity:** 3

**Owner:** CFO

**Reviewed:** 2026-09-30

**Totals:**

#### Total risk score

**Key:** risk

**Agg:** sum

**Format:** number

#### Highest risk score

**Key:** risk

**Agg:** max

**Format:** number

**Summary:**

#### Average risk per row

**Key:** avg_risk

**Expr:** sum_risk / count

**Format:** decimal

**Primary:** true

#### Highest single score

**Key:** max_risk

**Expr:** max_risk

**Format:** integer

**Notes:** Risk score is level times sensitivity, with a maximum of 12. Review every row of 9 or more. Use the Setup, Users/Roles area and the role's permission subtabs in NetSuite to confirm levels, and check for the same user holding two conflicting roles.

## Content

**Intro:** Auditors and controllers regularly ask who can create vendors, post journals or adjust inventory in NetSuite. This worksheet documents each role and permission level by record area, scores the risk and exports to Excel so access reviews are repeatable.

**Sections:**

#### How to use the worksheet

**Body:** List one row for each role and record area you want to review. Select the permission level, enter the score and rate the sensitivity of the area, then assign a reviewer and date. The risk score is computed for you. Start with the areas that touch money or master data, such as vendors, bills, payments, journal entries, inventory adjustments, price lists and role administration, then widen the scope over time.

#### NetSuite permission levels

**Body:** NetSuite permissions use five levels. None gives no access, View allows reading, Create allows adding new records, Edit allows changing existing records, and Full allows everything including deletion where it applies. Each permission is also tied to the role as a whole, so a user with several roles gets the combined access. Review the roles assigned to each user, not only the roles themselves.

#### Segregation of duties

**Body:** Segregation of duties means one person cannot start and approve the same financial action, such as creating a vendor and paying that vendor. Use the matrix to spot roles that hold conflicting full access, then fix them by splitting roles, adding approval workflows or placing a compensating review in the close process. Document exceptions you accept, with an owner and an expiry date.

#### Common mistakes

**Body:** Teams copy the Administrator role to create custom roles, grant Full where View would do, leave leavers active, and forget that roles can be assigned to users per subsidiary. Another is a review done once and never repeated. Schedule it quarterly and keep each version of the exported file as evidence.

**Cta:** If you need regular access reviews across several systems, Netray can build read-only reports from role and user data held in your ERP, on-prem if required.

**Faq:**

#### What permission levels does NetSuite have?

**Answer:** NetSuite has None, View, Create, Edit and Full. Create adds records, Edit changes existing records, and Full includes the rest, including deletion where allowed. Choose the lowest level that lets the person do their job.

#### How do I export NetSuite role permissions?

**Answer:** You can build a saved search on roles and permissions, use a role list report, or record the permissions on this worksheet. Check what your account supports and confirm the output against the role record before sharing it with an auditor.

#### What does the risk score mean?

**Answer:** It multiplies the permission level by the sensitivity of the area, so full access on financial master data scores 12 and view access on low sensitivity data scores 1. Treat it as a way to sort what to review first, not as a formal rating.

#### How often should roles be reviewed?

**Answer:** Quarterly is common for financial roles and at least annually for the rest. Also review after any acquisition, system change, major hire or leaver wave, and keep the dated worksheet as evidence for your audit file.

## Search terms

netsuite role permission matrix, netsuite roles and permissions excel, netsuite segregation of duties matrix, netsuite access review template, netsuite permission levels view create edit full, netsuite user access review

---
Talk to an engineer: https://netray.co/contact?intent=erp_ai | Machine catalog: https://netray.co/agent/catalog.json