NetSuite provides a cloud-based ERP software suite. NetSuite is an integrated suite of applications for managing accounting, order processing, inventory management, production, supply chain, and warehouse operations.

Integration details


Integration Categories

  • Financial System
  • Expense Management
  • HRIS


Authentication mechanism

  • API

Discovery Capabilities

Available entitiesProductEntity descriptionNetSuite resource
New servicesEAM, SMPService discovery is the process of automatically identifying services and applications. All discovered services are added to LeanIX automatically.Vendors
InvoicesSMPInvoices discovery is the process to collect invoices from all services. All discovered invoices on the services are added to LeanIX automatically.Transaction Search

(all types with vendor information - e.g. VendorBill, PurchaseOrder, etc.)
CostSMPCost discovery is the process to identify every spending on all costs. All discovered costs on the services are added to LeanIX automatically.ExpenseReport
EmployeesSMPEmployees are discovered to get a complete overview of all employees of an organization and enrich the data for each discovered user.Employees
DepartmentsSMPDepartments represent the organisational structure of an organization relate to employees. This data is used to identify where in the organization which SaaS is used.Departments



A full vendor list is pulled at the time of integration and daily checked for any new vendors added to NetSuite. Invoices and expenses are pulled for 1 year - from the date when the service is discovered.


More info on the resources used

Data is pulled using SOAP version 2017_2 (see WSDL)

Set up NetSuite

Retrieve NetSuite Account ID

  1. Log in to NetSuite
  2. Navigate to Setup > Integration > SOAP Web Services Preferences (link)
  3. Copy and save your Account ID as shown below

Enable Web Services and Token-Based Authentication

  1. Navigate to Setup > Company > Enable Features (link)

  1. Select the SuiteCloud tab
  2. Under SuiteTalk (WebService) make sure SOAP Web Services are enabled
  3. Under Manage Authentication enable Token-based authentication

  1. Save the configuration

Create an Integration Role

We recommend creating a separate integration role-specific to the LeanIX integration. This integration role must have permissions to retrieve vendors, transactions (bills, purchase orders), and/or departments and employees. This integration role must have the ability to log in through web services. This role can then be assigned to the integration user.

  1. Navigate to Setup > User/Roles > Manage Roles > New (link)

  1. Enter role name “LeanIX Integration”, select accessible subsidiaries (if not sure, select all) and enable “Web Services only role

  1. Under Permissions > Transactions, Permissions Lists and Permissions > Setup, add the permissions listed in the table below


Least privilege permissions

Not all permissions listed below are necessarily required for your integration. By default we will be pulling data for Financial System and Expense Management categories. For EAM this is additionally reduced to Vendors permission.
In case that you would like to pull also HRIS data please set the permissions accordingly and let your point of contact at LeanIX know.

Sub-tabPermissionLevelIntegration Category
TransactionsBillsViewFinancial System
TransactionsPurchase OrderViewFinancial System
TransactionsFind TransactionViewFinancial System
TransactionsCredit CardViewExpense Management
TransactionsExpense ReportViewExpense Management
ListsVendorsViewFinancial System
ListsExpense CategoriesViewExpense Management
ListsEmployee RecordViewHRIS
SetupSOAP Web ServicesFullany
SetupView Login Audit TrailFullany
  1. Save the new role


Querying of VendorBills and Expenses

Please note that if some permissions to resources (e.g. VendorBills, Expenses) are not provided by your, the integration will still work and query all invoices via the "Transaction Search" of NetSuite, however we might not get the full set of data that could be insightful for LeanIX. Please get in touch with your CSM and/or our Support team if you think this is the case.

Create an Integration User

Once you've set up our integration role (LeanIX integration), you need to assign this role to your integration user. We recommend creating a separate user for your integrations.

  1. Navigate to Lists > Employees > Employees > New (link)

  1. Enter a new user name “LeanIX Integration User”

  1. Scroll down to the Access section and check “GIVE ACCESS
  2. Assign the newly created role (LeanIX integration)

  1. Save the new user

Create an Integration Record

You need to create an integration record to represent the LeanIX application connecting to NetSuite.

  1. Go to Setup > Integration > Manage Integrations > New (link)

  1. Add a name for this integration “LeanIX Integration
  2. Select Enabled in the State picklist
  3. Check the Token-based Authentication checkbox on the Authentication subtab
  4. Save this integration
  5. Now that we have created an integration record, save the consumer key and consumer secret. You’ll enter this into LeanIX to connect to NetSuite later

Create Access Token

The next step is to create an Integration record in NetSuite and generate the authentication information needed to allow LeanIX to integrate.

  1. Go to Setup > Users/Roles > Access Tokens > New (link)

  1. Select the integration record, integration user, and role we created earlier.
  2. Save the newly created access token.
  3. Save the token ID and token secret somewhere and keep it confidential - these will not
    be retrievable again from NetSuite. You’ll enter a token ID and token secret into LeanIX to connect to NetSuite later.

Integrate NetSuite in LeanIX

  1. Log into LeanIX
  2. In LeanIX SMP navigate to Account Settings > Discover Integrations, find NetSuite and click Add
  3. Enter Account ID, Consumer Key, Consumer Secret, Token ID, and Token secret

  1. Click Integrate