Discussions
Can a user with the Administrator role create, enable, or leave behind any type of “backdoor” access
We would like to understand the security and governance controls around NetSuite Administrator access.
Specifically, can a user with the Administrator role create, enable, or leave behind any type of “backdoor” access, hidden integration, unauthorized workflow, script, role permission, or persistent access mechanism that could later compromise, manipulate, or harm the account, data, or business operations?
Additionally:
What Administrator activities are fully logged and auditable?
Are there safeguards to detect unauthorized scripts, integrations, workflows, custom roles, tokens, or API connections?
Is there a recommended security review or health check process to verify that no unauthorized “backdoor” access or malicious customization exists in the account?