This notice is intended for all active NetSuite customers.
You are receiving this message because NetSuite is planning to update 2FA rules in the 2027.1 release. This update will require all users with the Employee entity to use 2FA in all roles they have assigned to them.
The Require 2FA for All Roles feature will greatly enhance the security of your account.
What is Changing?
Previously, only roles with high-privileged permissions required 2FA. Administrators could add more roles or change 2FA rules on the Two-Factor Authentication Roles page.
As of NetSuite 2027.1, NetSuite requires all Employee users to use 2FA. However, an Administrator can disable this feature at any time by going to Setup > Company > Enable Features, under Company subtab. Disabling the Require 2FA for All Roles feature reverts the 2FA settings to their previous state according to the Two-Factor Authentication Roles page.
Note: Non-employee roles, including Customer Center, Vendor Center, Partner Center, Advanced Partner Center, and web store/shopper roles, are not included.
Required Actions
After the account is upgraded to NetSuite 2027.1:
- For users with a working 2FA setup, no action is required.
- Users without a working 2FA setup must install an authenticator app on their phone. For more information, see Supported Authenticator Apps. The first time they log in to NetSuite after the upgrade, users will be prompted to complete the 2FA setup. For more information, see Complete Your 2FA Setup.
If you have any questions, please contact NetSuite Customer Support.
