Update Bundle or Verify Permissions
NetSuite's 2026.01 release requires some customers to update their Tesorio bundle or the role associated with your Tesorio Integration user role in NetSuite in order to:
Continue receiving NetSuite messages in Tesorio (view access)
Apply credit memos in Tesorio & Customer Portal (full access)
The fix requires two specific permissions on your Tesorio integration role:
Permissions > Lists > Messages for Analytics and REST (View) — for email message syncing
Permissions > Setup > Allow Non G/L Changes (Full) — for credit memo application features
Action required — Choose your path
Which path applies to you?
Path A: You're using the Tesorio Permissions Role that came with the bundle (most common) → Update the bundle
Path B: You've created or modified your own custom role for Tesorio → Manually verify/add permissions
Path A: Update the Tesorio Bundle (Recommended)
Path A: Update the Tesorio Bundle (Recommended)
If you're using the standard Tesorio Permissions Role that comes with the bundle, simply update the bundle and all permissions will be configured automatically.
Steps to update the bundle:
In NetSuite, navigate to Customization > SuiteBundler > Search and Install Bundles
Find the Tesorio bundle in the list
Click Update in the Action column
Follow the on-screen prompts to complete the update
Once complete, email syncing will resume automatically
That's it! No manual permission configuration needed. The bundle update handles everything.
Path B: Manually Verify Permissions (Custom Role)
Path B: Manually Verify Permissions (Custom Role)
If you've created or modified your own custom role for the Tesorio integration, you'll need to manually verify and add the two required permissions.
How to check and add permissions:
In NetSuite, go to Setup → Users/Roles → Manage Roles
Open the role assigned to your Tesorio integration user
Click the Permissions tab
Under the Lists subtab, confirm the role has View (or higher) access to:
Messages for Analytics and REST ← This is critical for email syncing
Under the Setup subtab, confirm the role has Full access to:
Allow Non G/L Changes ← This is only required to be able to apply credit memos in Tesorio
If either permission is missing:
Click Edit
Add the permission(s)
Set the level as specified above (View for Messages, Full for Non G/L Changes)
Click Save
Verification
After adding the permissions, email syncing should resume within 5–10 minutes. If messages still don't appear, proceed to the testing steps below.
How to test that email sync is working
Option A — End-to-end test (Recommended, no technical tools needed):
In NetSuite, pick a recent invoice or customer that has one or more email messages logged against it (dated after June 1, 2026)
In Tesorio, open that same invoice/customer
Trigger or wait for the next NetSuite sync, then check if the email message(s) now appear in the Sent/Received Emails section with the full message body and any attachments
Option B — Direct verification (if you have SuiteQL access):
Running as the Tesorio integration role, run these queries to confirm the role can read messages:
SELECT id FROM message WHERE messagetype = 'EMAIL' FETCH FIRST 5 ROWS ONLY;
SELECT id, name FROM file FETCH FIRST 5 ROWS ONLY;
If both return results, the role has the access needed for email syncing.
If messages still don't appear
If you've completed the steps above and email messages still aren't syncing:
Path A users: Confirm the bundle update completed successfully (the version should have changed)
Path B users: Double-check that both permissions are present and set to the correct levels
If both are confirmed, contact Tesorio Support — we can verify the sync method is enabled on your account and review the integration logs