Overview
Understanding why NetSuite system notes display different authors for user role changes automated by Netwrix Platform Governance for NetSuite, and providing auditors with an official reference explaining this behavior.
Description
When automating user role assignments or removals in NetSuite using User Provisioning Change Requests, the way and timing of the operation directly affect how changes are recorded in NetSuite’s system notes. This is important for access reviews and audits, as auditors may notice that the author of a change can be either a specific user or ‘System.’
There are two main scenarios:
- Change Requests Without a Scheduled Date/Time:
- The provisioning or deprovisioning occurs immediately after approval.
- The system notes will show the approver as the author of the change.
- Change Requests With a Scheduled Date/Time:
- Approval After the Scheduled Time:
- The change is executed immediately upon approval, and the approver is recorded as the author (same as scenario 1).
- Approval Before the Scheduled Time:
- The change is held until the scheduled time. When the scheduled process executes the change, the system notes will show ‘System’ as the author.
This is the intended behavior of NetSuite’s platform, as described in Oracle’s official documentation: Understanding the context of changes. Auditors can reference this article to understand why the author of changes may appear as a specific user or as ‘System,’ depending on how and when the automated action was performed.
Note: Netwrix Platform Governance for NetSuite leverages NetSuite’s native system notes to ensure traceability and compliance for all automated user provisioning actions.