Sign in to NetSuite
Sign in to NetSuite as an administrator before starting — enabling features, editing role permissions, and creating the integration record all require administrator access.
Sign in to NetSuite
Open the NetSuite login page and sign in.
- Enter your Email address and Password, then click Log In.
- Sign in to the same account (production or sandbox) that you want to connect.

Enable required features and permissions
Before creating the integration, make sure the account has the SuiteTalk REST API features enabled and that the connecting role can authenticate with OAuth 2.0.
Enable REST Web Services
In the top navigation bar, go to Setup > Company > Enable Features and open the SuiteCloud subtab. Under SuiteTalk (Web Services), check REST WEB SERVICES.

Enable OAuth 2.0
Still on the SuiteCloud subtab, scroll to Manage Authentication and check OAUTH 2.0. Click Save when done.

Grant the role permissions
In the top navigation bar, go to Setup > Users/Roles > Manage Roles, then click Edit next to the role the connecting user will use. On the role page, open the Permissions subtab — it is split into sub-tabs by permission type (Transactions, Reports, Lists, Setup, etc.). Add the permissions below on the matching sub-tab, then click Save.
- On the Setup sub-tab, add REST Web Services with Level set to Full.
- On the Setup sub-tab, add Log in using OAuth 2.0 Access Tokens with Level set to Full.
- Add record-level permissions (Level Full) for the data StackOne will access. A recommended baseline: Customers, Vendors, Employees, Invoice, Bills, Sales Order, Purchase Order, Journal Entry, Credit Memo, Customer Payment, Deposit, Items, Accounts, Subsidiaries, Departments, Currency — plus SuiteScript if you also enabled RESTlets.

Create an integration record
Register StackOne as an OAuth 2.0 integration application in NetSuite.
Open Manage Integrations
Go to Setup > Integration > Manage Integrations to open the Integrations list, then click New.

Enter a name for the integration
In the NAME field, enter a name to identify the integration (for example, StackOne Integration). Leave STATE set to Enabled.
- Leave REFRESH TOKEN VALIDITY (IN HOURS) at its default of 168 (7 days). This is the standard NetSuite refresh-token lifetime and is suitable for StackOne — StackOne refreshes the token automatically before it expires. Setting it lower forces more frequent reconnection.
Configure OAuth 2.0
In the Authentication subtab, enable OAuth 2.0 with the Authorization Code Grant and register the StackOne redirect URI.
Enable Authorization Code Grant and set the Redirect URI
In the OAuth 2.0 section, check AUTHORIZATION CODE GRANT. In the REDIRECT URI field, enter the StackOne callback URL exactly.
- Redirect URI:
https://api.stackone.com/connect/oauth2/netsuite/callback - Leave PUBLIC CLIENT unchecked.

Select the REST WEB SERVICES scope
Under SCOPE, enable REST WEB SERVICES so the integration can access the SuiteTalk REST API.
Save and copy the credentials
Save the integration record and copy the generated client credentials into StackOne.
Save the integration
Click Save. NetSuite creates the integration and displays the Client Credentials on the confirmation page.
Copy the Client ID and Client Secret
Copy the CONSUMER KEY / CLIENT ID value into the Client ID field, and the CONSUMER SECRET / CLIENT SECRET value into the Client Secret field, in the StackOne Connector profile.
- These values are displayed only once. After you leave this page they cannot be retrieved — if lost, reset the credentials to generate new values.
- Scopes (optional): leave as the default
rest_webservicesunless you also enabled RESTlets, in which case enterrest_webservices restlets.

Creating the StackOne Connector Profile
To create the Connector Profile in StackOne for NetSuite:Navigate to Connector Profiles
Create New Connector Profile
- Click + Connector Profile
- Search for and select NetSuite
- Select Type as OAuth 2.0
- Fill out the fields using details retrieved from your provider:
- Client ID
- Client Secret
- Scopes (Optional)
- (Optional) Select Actions to be enabled for this Connector Profile
- Click Create profile