netsuite-sdf-roles-and-permissions — Claude Code skill for NetSuite

What netsuite-sdf-roles-and-permissions does

This skill answers NetSuite permission questions with concrete values instead of guesses. While you author customrole XML or review a <permkey> block in an SDF object, it resolves the exact internal ID and picks a matching access level.

Two references ship with it: references/permissions.json holds standard IDs and display-name aliases, and references/permission-index.md indexes them by category and business scenario. Standard permissions carry the prefixes ADMI_, LIST_, REGT_, REPO_ and TRAN_. Custom record permissions work differently — their permkey is a script ID such as customrecord_invoice_batch, so validate it against your project XML rather than the reference file.

Levels are meant to stay small: VIEW for reading and search, CREATE to add records without touching existing ones, EDIT to create and update, FULL to delete or administer broadly. The skill treats FULL as an exception you have to justify. For a script execution role it refuses to recommend the built-in Administrator for production, so any config leaning on that role is worth a second look. Each answer names the permkey, the level, why that level is enough, and flags where the skill inferred from a use case without confirming against project XML.