Connect to Oracle NetSuite via JDBC

Important Nexla Help Center Update:

Nexla's Zendesk Help Center pages are being deprecated and will soon no longer be available.

Nexla Documentation is now the home for Nexla's User Guides, with improved formatting and categories that are easier to navigate, providing a better overall user experience.

Please update any bookmarks to the new Nexla Documentation site (docs.nexla.com/user-guides).

_______________________________________________

This article describes how to add Oracle NetSuite as a new data source via JDBC.

For the version of this article pertaining to the previous Nexla UI, click here.

Contents:

1. Enable SuiteAnalytics Connect
2. Set Up Roles in NetSuite
3. Assign Roles in NetSuite
4. Add the NetSuite JDBC Credential in Nexla
5. FAQs

1. Enable SuiteAnalytics Connect

1. In Oracle NetSuite, navigate to Analytics-->Connectivity.
   
   
2. Check the box next to "SuiteAnalytics Connect".
   

   For more information about how to enable the SuiteAnalytics Connect service feature, refer to this Oracle page.

   
   
   

2. Set Up Roles in NetSuite

1. Navigate to Setup-->User/Roles-->Manage Roles-->New.
   
   
2. In the Name field for the new role, enter "JDBC Authentication".
   
   
   
   
3. Under the Subsidiary Restrictions category, check the box next to "User Subsidiary".
   
   
   

   Important: The records and transactions that users can view and edit for subsidiaries are limited by each user's assigned role its complete set of permissions. For example, by default, employees of a specific subsidiary are able to view and edit data only for the that subsidiary. If a role is customized to include multiple subsidiaries (Subsidiaries list), users assigned this role can view and edit data for all included subsidiaries. If the "Allow Cross-Subsidiary Record Viewing" box is also checked for the customized role, users assigned this role can view data for all subsidiaries.
   
   For more information about subsidiary restrictions, refer to this Oracle page.

4. Under the Authentication category, for the TWO-FACTOR AUTHENTICATION REQUIRED option, select "Not Required".
   
   
   
   
5. Using the tabs at the bottom of the screen, navigate to Permissions-->Setup, and add the "SuiteAnalytics Connect" permission.
   

   Important: SuiteAnalytics Connect permission cannot be added to a role with SAML Single Sign-on permission.

   
   
   
6. Also under Permissions-->Setup, add the "SuiteAnalytics Connect – Read All" permission.
   

   Important: An administrator can assign the SuiteAnalytics Connect permission to users to give them access to the Connect service. Users assigned to custom roles can be granted the SuiteAnalytics Connect – Read All permission, which gives users read-only access to all NetSuite data through the Connect service. For additional important considerations when assigning user permissions, see the FAQs section.
   

   
   
   

3. Assign Roles in NetSuite

1. Navigate to Lists-->Employees.
   
   
2. Under the Employees tab, click Edit next to each user to whom JDBC authentication permissions should be assigned.
   
   
3. In the employee editing screen, navigate to Access-->Roles, and ensure that the box next to "Give Access" is checked.
   
   
   
   
4. Select the JDBC Authentication role created in Section 2, and click Add.
   
   
   
   
5. Click Save to save the role assignment.

4. Add the NetSuite JDBC Credential in Nexla

1. Log into Nexla.
   
   
2. Navigate to the Integrate section by selecting  from the platform menu on the left side of the screen. 
   
   
3. Click  at the top of the Integrate toolbar on the left.
   
   
   
   
4. Select the connector from the connectors list, and click in the top right corner of the screen.
   
   
5. Click to open the Add New Credential window.
   
   
6. Enter a name for the credential in the Credential Name field.
   
   
   
   
7. Optional: Enter a description of the credential in the Credential Description field.
   
   
   
   
8. Enter the database URL in the NetSuite Database URL field.
   

   Important: See the FAQs section below for instructions on how to find the NetSuite database URL.

   
   
   
9. Enter the appropriate NetSuite username in the Username field.
   
   
   
   
10. Enter the password associated with the NetSuite username in the Password field.
    
    
    
    
11. Enter the name of the NetSuite database in the Database Name field.
    
    
    
    
12. Enter the name of the schema associated with the NetSuite database in the Schema Name field.
    
    
    
    
13. Optional: If the database is not publicly accessible, click to access additional configurable connection options, and check the box next to "Requires SSH Tunnel for access?".
    

    This will configure Nexla to connect to a bastion host via SSH, with the database connection occurring through the SSH host.

    
    
    
    1. In the SSH Tunnel Host field, enter the SSH tunnel hostname or IP address of the bastion host running the SSH tunnel server with access to the database.
       
       
       
       
    2. Enter the port number of the tunnel bastion host to which Nexla can connect in the SSH Tunnel Port field.
       
       
       
       
    3. In the Username for Tunnel field, Enter the SSH username created for Nexla in the bastion host.
       

       Usually, the username is set to "nexla".

       
       
       
14. Click .
    

    If all of information was entered correctly in the steps above, Nexla should successfully save the credential and authenticate to the NetSuite account.

    
     

5. FAQs

1. Specifying the NetSuite Database URL Connection

• Following is an example of a typical SuiteAnalytics Connect JDBC driver connection URL, with <ServiceHost>, <accountID>, and <roleID> variables as placeholders corresponding to each user's SuiteAnalytics Connect host name, account ID, and role ID, respectively:
  

  jdbc:ns://<ServiceHost>:1708;ServerDataSource=NetSuite2.com;Encrypted=1;NegotiateSSLClose=false;CustomProperties=(AccountID=<accountID>;RoleID=<roleID>);

• Host name, account ID, and role ID values can be found on the SuiteAnaytics Connect Driver Download page under the Your Configuration category. To access the SuiteAnalytics Connect Driver Download page, click the "Set Up Analytics Connect" link in the Settings portlet, which is typically located on the bottom left of the NetSuite home page when logged into NetSuite.
  
  
• The connection properties used in this connection URL correspond to the following fields on the SuiteAnalytics Connect Driver Download page under the Your Configuration category:
  
  

  Field	Connection Property
  Service Host	ServerName
  Service Post	PortNumber
  Service Data Source	ServerDataSource
  Account ID	CustomProperties(AccountID)
  Role ID	CustomProperties(RoleID)

• For more information about additional JDBC connection properties, refer to this Oracle page.
  
  

2. Assigning SuiteAnalytics Connect permissions

• Administrators can assign the SuiteAnalytics Connect Permission to users, giving the assigned users access to the Connect service.
  
  
• Users assigned to custom roles can also be granted the SuiteAnalytics Connect – Read All permission, which gives these users read-only access to all NetSuite data through the Connect service. This can improve querying performance.
  
  
• Important: Enabling the SuiteAnalytics Connect – Read All permission exposes all data, including sensitive information such as employee and customer records, to the assigned user. Therefore, this should be considered when selecting users to be granted the SuiteAnalytics Connect – Read All permission.