NS0565 Sync Error in NetSuite Integration

If you see the error:

NS0565: The role linked to your NetSuite access token doesn’t have permission to access Account records. Please confirm the token is assigned to the Expensify Integration role by viewing the ‘Access Token’ in NetSuite.

This means the NetSuite access token used by Expensify is assigned to a role that does not have permission to access Account records.

Why the NS0565 Sync Error Happens in NetSuite

The NS0565 error occurs when:

• The NetSuite Access Token is assigned to the wrong role.
• The role assigned to the token does not include the required permissions.
• Global permissions on the employee record override role-level permissions.
• The Expensify Integration role is not properly assigned.

Expensify requires the Access Token to be tied to the correct role with appropriate permissions.

How to Fix the NS0565 Sync Error

Step One: Confirm the Role Assigned to the Access Token

1. Log in to NetSuite as an Administrator.
2. Search for Access Tokens.
3. Click View next to the token used for the Expensify integration.
4. Confirm the token is assigned to the Expensify Integration role.

If the token is not assigned to the correct role, continue to Step Two.

Step Two: Assign the Expensify Integration Role to the Employee

1. Search for the NetSuite Employee record used to create the access token.
2. Click Edit.
3. Go to the Access tab.
4. Add the Expensify Integration role.
5. Save the changes.

Step Three: Review Global Permissions on the Employee Record

1. On the same employee record, review Global Permissions.
2. Remove the following permissions if present:
   • Web Services
   • Access Tokens

These global permissions can override role-level permissions.

Alternatively, set them to Full access if removal is not appropriate for your configuration.

Step Four: Sync the Workspace in Expensify

1. In Expensify, go to Settings.
2. Select Workspaces.
3. Select your Workspace.
4. Click Accounting.
5. Click Sync.

After updating the role and permissions, the sync should complete successfully.

FAQ

Does NS0565 Mean the Token Is Invalid?

Not necessarily. The token may still be valid, but it is assigned to a role without sufficient permissions.

Do I Need to Create a New Access Token?

In most cases, no. Updating the role assignment and permissions resolves the issue. If problems persist, you may generate a new token tied to the correct role.