Version: eXtendFiles 1.8.9 and above

Audience: Administrator

Overview

To create OAuth 2.0 Client Credentials (M2M) for eXtendFiles, you should use a dedicated integration user and a custom role based on the built-in eXtendFiles Server User role. This keeps permissions aligned with eXtendTech’s minimum requirements and makes it easier to manage long-term access.

Prerequisites

Configuration

Step 1: Create a custom role (copy of eXtendFiles Server User)

  1. Navigate to SetupUsers/RolesManage Roles.
  2. Locate the built-in role named eXtendFiles Server User.
  3. Click Customize (to create a copy).
  4. In the Name field, add your company name as a prefix.
    • Example: Acme - eXtendFiles Server User
  5. Add any additional permissions that are needed.
    1. Example: If adding eXtendFiles functionality on record types in addition to the default install, grant the role access to those additional record types.
  6. Click Save.

Step 2: Assign the custom role to your integration user

  1. Navigate to ListsEmployeesEmployees.
  2. Open the integration user record.
  3. Assign the new custom role (for example, Acme - eXtendFiles Server User).
  4. Click Save.

Step 3: Generate OAuth 2.0 Client Credentials (M2M) using the custom role

Follow the steps in Creating OAuth 2.0 Client Credentials (M2M), using:

  • Entity: your integration user
  • Role: your custom role (company prefix + eXtendFiles Server User)
  • Application (Integration Record): eXtendTech Files

After you save the mapping, NetSuite generates a Certificate ID. Keep this available for your eXtendFiles configuration.

Frequently Asked Questions (FAQs)

Q: Why do I need to copy the eXtendFiles Server User role instead of using it directly?
A: Copying the role lets you keep the original role unchanged while still following a standard naming convention (company prefix) and managing permissions in a controlled way.
Q: Can I use my personal NetSuite user as the integration user?
A: It is strongly recommended to use a dedicated system/integration user so integrations continue to work if staff changes occur. See System or Integration User Best Practices.
Q: What role should I select when creating the OAuth 2.0 Client Credentials mapping?
A: Select your custom copied role (for example, Acme - eXtendFiles Server User) so the credentials are tied to the correct permission set.