---
title: Security and Permissions
slug: netsuite/security-and-permissions
description: Learn how user security and permissions are managed in Breadwinner through the use of Permission Sets. Find out about the specific roles and permissions required for installing Breadwinner for NetSuite and establishing the API connection between Breadwinn
docTags: 
createdAt: 2022-05-05T21:07:21.000Z
---

User Security and Permissions for Breadwinner are generally controlled by use of Permission Sets.

## Breadwinner Permissions

The following are regarding general permissions for the Breadwinner for NetSuite application, it's connection to NetSuite and the regular sync of data.

**Application Installation** can only be performed by a user with full System Administrator permissions applied to them. 
As Breadwinner for NetSuite is an App on the Salesforce AppExchange, it must be installed in the same manner as all other apps.

**API connection**, when Breadwinner for NetSuite is connected to NetSuite should be performed by the user in Salesforce  

## User Permissions

You will need System Admin profile to do the following on the setup page.  These are rarely changed setup actions.

Connect to NetSuite
Assign Page Layouts
Control the toggle for Read-Only-Mode / Active-Mode
Config -> General - Sync Interval
Config -> PDF - request URL
Employee
Troubleshoot -> General -> Scheduled Jobs Status : "Restart Sched Job under my Admin User"
Troubleshoot -> General -> Restart And Updating: "Reschedule Hourly Sync" & "Reschedule Weekly Sync"
Troubleshoot -> General -> One-Click NetSuite Import: All options
​

Standard User profile with the BW Admin Permission Set has access to everything else except

Permissions : Will have 'read' access but can be changed by cloning the Standard User profile and giving "PermissionSetAssignment" access.
Product Match:  Will have 'read' access but can be change by cloning the Standard User profile and modifying the object permissions.