Discussions
SuiteWorld brings thousands of innovators, builders, and leaders together to learn, connect, and shape what’s next. This October, explore how to build a stronger foundation for growth through inspiring keynotes, major product reveals, hands-on sessions, and unforgettable moments—all in one place for our biggest event of the year. Join us
Can a user with the Administrator role create, enable, or leave behind any type of “backdoor” access
We would like to understand the security and governance controls around NetSuite Administrator access.
Specifically, can a user with the Administrator role create, enable, or leave behind any type of “backdoor” access, hidden integration, unauthorized workflow, script, role permission, or persistent access mechanism that could later compromise, manipulate, or harm the account, data, or business operations?
Additionally:
What Administrator activities are fully logged and auditable?
Are there safeguards to detect unauthorized scripts, integrations, workflows, custom roles, tokens, or API connections?
Is there a recommended security review or health check process to verify that no unauthorized “backdoor” access or malicious customization exists in the account?