Hi @david.smith,

For this concern, one question is that when you are attempting to issue a token, is the integration record where you plan to link the token installed on the account? That is one very crucial thing thing to concern in this case. Do you also have the permission for that user to login using token? Also another thing is that for that user role, is the web services user unchecked?

I might also suggest you to try https://netsuite.custhelp.com/app/an…il/a_id/44164/

chanarbon Thanks for the response. Yes the integration record is in the account. I have looked at and tested that code.

I think what I’d really like to do is not available in NetSuite (but it should be). I’m using a login that has token management/admin permissions. I want to use that account to assign tokens to a user with Log in using Access Tokens permission. This can be done via the UI but it doesn’t seem possible to do via script.

I want to assign tokens to a user dynamically that has been granted access with a role that allows TBA. Another problem with the current NS setup is that the user’s password is required in the NLAUTH header. If the request comes from a user with Access Token Management it should grant the tokens for the entity requested.

Hi david.smith ,

From what I understand, you want to replicate the ability of administrator to generate tokens for users granted with the TBA-enabled role instead of the user with the TBA-enabled role to issue the token on their own. As of the moment, if the scenario that is mentioned is true, I think is is currently not yet available as the granting of token is done through the identity of the user requesting the token.

For the “In the UI this can be done. We should be able to do this with script as well.”

In the programmatic issuing of tokens, it is per user basis which means that a user requests for a token using their credential for them to use while on the other hand, on the UI, the capability, the administrator selects a user and generates a token for the user. The big difference in the mentioned scenario is that the administrator requesting the token using UI has the option to select to which user the provisioning of token will happen but in the programmatic approach, there is no option for the admin to select to which user the provisioning with happen since it is per user basis

I could not get the PHP sample code to work. And I don’t want the users to have to go to another site and give them complicated instructions on how to use tokens.

Hi @david.smith

I think we lost each other at “From what I understand, you want to replicate the ability of administrator to generate tokens for users granted with the TBA-enabled role instead of the user with the TBA-enabled role to issue the token on their own. As of the moment, if the scenario that is mentioned is true, I think is is currently not yet available as the granting of token is done through the identity of the user requesting the token.” when you mentioned correct in there. I am thinking that you might have been receiving an HTTP response 302. Could you post the error response thrown?