Netsuite - Suspend User
Netsuite - Suspend User suspends (deactivates) employee records in NetSuite directly from Axonius for:
- Assets returned by the selected query or assets selected on the relevant asset page.
When triggered, this action:
- Connects to your NetSuite instance using the REST API.
- Identifies the target employee using their User ID from the configuration.
- Sets the employee's
isInactivefield totrue, effectively suspending their account. - Reports success or failure for the suspension operation.
See Creating Enforcement Sets to learn more about adding Enforcement Actions to Enforcement Sets.
Note
- Not all asset types are supported for all Enforcement Actions.
- See Actions supported for Activity Logs, Adapters Fetch History, and Asset Investigation modules.
- See Actions supported for Aggregated Security Findings.
- See Actions supported for Software.
Required Fields
These fields must be configured to run the Enforcement Action.
- Action name - The name of this Enforcement Action. The system sets a default name. You can change the name.
- Configure Dynamic Values (optional) - Toggle on to enter a Dynamic Value statement. See Creating Enforcement Action Dynamic Value Statements to learn more about Dynamic Value statement syntax.
- Use stored credentials from the Oracle NetSuite adapter - Select this option to use credentials from the adapter connection. By default, the first connection is selected.
-
When you select this option, the Select Adapter Connection drop-down becomes available. Select the adapter connection to use for this Enforcement Action.
Note
To use this option, you must successfully configure a Oracle NetSuite adapter connection.
-
- User ID - The NetSuite employee ID to delete.
-
Compute Node - The Axonius node to use when connecting to the specified host. For more details, see Working with Axonius Compute Nodes.
Additional Fields
These fields are optional.
Connection and CredentialsWhen Use stored credentials from the adapter is toggled off, some of the connection fields below are required to create the connection, while other fields are optional.
- Company ID - Your NetSuite Company ID (for example:
COMPANY_IDfromhttps://COMPANY_ID.netsuite.com).- Client ID - The OAuth 2.0 Client ID for API access.
- Certificate ID - The Certificate ID for authentication.
- Private Key - Upload the private key file for authentication.
- Private Key Algorithm - Select the algorithm used for the private key.
Verify SSL (optional) - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.
HTTPS Proxy Password (optional) - The password to use when connecting to the server using the HTTPS Proxy.
HTTPS Proxy User Name (optional) - The user name to use when connecting to the server using the HTTPS Proxy.
Gateway Name - Select the Gateway through which to connect to perform the action.
How the Action Works
When this action is triggered:
- Axonius validates that the User ID parameter is provided
- The action connects to the NetSuite REST API using the provided credentials or stored adapter connection
- It calls the API endpoint:
PATCH /services/rest/record/v1/employee/{user_id} - The request body includes:
isInactive:true
- The NetSuite API updates the employee record to set them as inactive
- Axonius records the result (success/failure) for the operation
APIs
Axonius uses the Oracle NetSuite API.
API Endpoint: PATCH /services/rest/record/v1/employee/{user_id}
URL Parameters:
user_id- The NetSuite employee ID from the EC configuration
Request Body:
{
"isInactive": true
}Response: Returns the updated employee record with the inactive status.
Testing the Connection
Before using this action in a production enforcement, you can test the connection:
- Configure all required parameters (or select a stored adapter connection).
- Click Test Connection.
- Verify that the connection to NetSuite is successful.
Updated about 10 hours ago
