I just submitted this case #688661 as an enhancement/possible defect.  Does anybody know of a setting I am missing?


Please provide detailed steps to reproduce the problem:
1. log into NS under any role that has vendor access
2. using default NS vendor form
3. create a vendor
4. provide access (under Access tab) to NS for vendor

Result:
Anybody with access to vendors can give ANY access level to the vendor -- including Administrator, etc. -- when using the default NetSuite vendor entry form.

Expected Result:
Expect that vendor access tab should be restricted so that vendor can't be given any role by any employee... similar to Customer Center is the only available role to Customer Access tab.  Recognizing that in many cases you want to be able to give a variety of roles to a vendor (not just vendor center) there should be a system setting or role permission to restrict non-Administrators from giving any role access.  Furthermore, the NS default form should certainly be restricted to Vendor Access role only.  Our workaround was to create a custom vendor entry form and make it preferred