NS0228 Sync Error
NS0228 Sync Error in NetSuite Integration
If you see the error:
NS0228: Permission error querying NetSuite for ‘ExpenseCategory’. Please ensure the Expensify Integration Role has been added to a user in NetSuite.
This means the Expensify Integration Role is not properly assigned to a NetSuite user.
Why the NS0228 Sync Error Happens in NetSuite
The NS0228 error occurs when:
- The Expensify Integration Role is not assigned to a NetSuite user.
- The user associated with the access token does not have the correct role.
- The token was created under one role but the connection is attempting to use another.
- The role-user-token combination does not match the original integration setup.
In NetSuite, access tokens are tied to:
- A User
- A Role
Once a connection is created using a specific token/user/role combination, it cannot be switched to another role without creating a new token and reconnecting.
How to Fix the NS0228 Sync Error
Step One: Confirm the Expensify Integration Role Is Assigned to a User
- Log in to NetSuite as an Administrator.
- Go to Setup.
- Select Users/Roles.
- Click Manage Users.
- Open the user associated with the Expensify integration.
- Confirm the Expensify Integration Role is assigned to that user.
- Save the user record if changes are made.
The user does not need to be a NetSuite Admin, but must have the permissions included in the Expensify Integration Role.
Step Two: Confirm Token Configuration
- Search for Access Tokens in NetSuite.
- Confirm the token is associated with:
- The correct User
- The correct Expensify Integration Role
Important:
- You cannot create a connection using tokens with one role and then switch roles later.
- If the role needs to change, create a new token with the correct user-role combination and reconnect the integration in Expensify.
Step Three: Sync the Workspace in Expensify
- In Expensify, go to Settings.
- Select Workspaces.
- Select your Workspace.
- Click Accounting.
- Click Sync.
FAQ
Does NS0228 Mean the Integration Is Broken?
No. This error indicates a role and user configuration issue in NetSuite.
Do I Need to Create a New Token?
If the token is tied to the wrong role, yes. Tokens cannot be reassigned to a different role after they are created.