Provisioning
The Oracle NetSuite SaaS connector supports provisioning, allowing you to create and manage accounts and entitlements in Oracle NetSuite directly from SailPoint.
Prerequisite: Your system is configured for provisioning.
When SailPoint provisions new accounts to the source, it uses the attributes on the Create Account page as instructions or a template for what to include in the account. This page is also referred to as the provisioning policy.
When new access is granted on a source where a user does not already have an account, SailPoint automatically includes account creation in the provisioning. This applies whether provisioning is started from an access request or from an automated role or lifecycle state assignment.
For direct-connect sources, SailPoint automatically creates the account from this configuration. If the source is not configured as a direct-connect source, SailPoint creates and assigns a provisioning task to the source owner and includes the values for the source owner to use in manually creating the account.
Important
This section describes the default Create Account configuration. SailPoint recommends that you work with Services to define a provisioning configuration specific to your company's needs. Be sure to verify large changes to the provisioning policy before implementation. Failure to do so might cause provisioning to fail.
Default Create Account Attributes
| Account Attribute | Generator | Description |
|---|---|---|
| EmpID | Identity Attribute | The SailPoint User Name |
| password | Generator | Create password |
| Identity Attribute | Email of the employee. Select the email type from the drop-down list as per your requirement. The email types are Work Email and Alternate Email. | |
| OfficePhoneNumber | Disable | Office phone number of the employee |
| Fax | Disable | Fax number of the employee |
For the Oracle NetSuite SaaS connector, email and password are required as provisioning attributes when a role is assigned to an existing NetSuite account without any pre-existing roles.
The Oracle NetSuite SaaS connector supports the EmpID attribute as an identity attribute in the provisioning policy. Previously it was generated as $(firstname)$(uniqueCounter).
Additional Provisioning Policy Attributes
| Account Attribute | Description |
|---|---|
| FirstName | The employee's first name |
| LastName | The employee's last name |
| Department | The Department of the user |
| DefaultExpenseReportCurrency | Default Currency for Expense Reports |
| Class | Class of the employee |
| Requirepwdchange | Indicates if a password change is required |
| giveAccess (supported only for update operation) | To disable giveAccess, make sure Password is not set in an update request |
| Location | The Location of the user |
| Subsidiary | The subsidiary associated with the employee |
The following fields can be configured for provisioning:
| Type | Attribute |
|---|---|
| String | accountNumber initials middleName phone salutation |
| Boolean | usePerquest isSalesRep isSupportRep sendEmail eligibleForCommission |
| Date | lastPaidDate birthDate hireDate releaseDate lastReviewDate nextReviewDate |
| Double | expenseLimit purchaseOrderLimit purchaseOrderApprovalLimit approvalLimit laborCost |
Documentation Feedback
Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.