Oracle NetSuite + Naarvin: every OneWorld subsidiary, read only

How Naarvin reads NetSuite OneWorld: the machine-to-machine sign-in with your certificate, what it reads per subsidiary, how it syncs, and how journals return.

3 min read
In short

Naarvin reads NetSuite OneWorld through SuiteQL, signed in machine to machine with a certificate you register in NetSuite. Each subsidiary becomes a company in Naarvin, with its chart of accounts, its posting lines from the primary accounting book, its open invoices, bills, credits and payments, and its departments and classes. The connection only reads; approved journals go back as a file you import.

What does Naarvin read from NetSuite?

What the NetSuite connection reads, and what it leaves out
AreaReadLeft out
CompaniesEvery active subsidiary, with its base currency and countryElimination subsidiaries
AccountsThe chart of accountsStatistical and non-posting accounts
LedgerPosting lines of the primary accounting book, one journal per transaction and subsidiary, in the subsidiary's base currencySecondary accounting books
Open itemsCustomer invoices, credit memos and payments; vendor bills, credits and payments; with what is still unpaid or unapplied-
PartiesCustomers and vendors with e-mail and phoneVAT numbers
DimensionsDepartments and classes on lines-

The open items feed receivables and payables aging for each subsidiary, and the subsidiaries come together in group figures in Reporting AI.

How does Naarvin sign in to NetSuite?

Machine to machine, with no browser sign-in and no password. You create an integration record in NetSuite for Naarvin and map a certificate to it for a user with a read-only role. Naarvin signs a short request with the certificate's private key and exchanges it for a token that lasts an hour, then asks again when it expires. The private key is encrypted when saved and never leaves Naarvin's sealed store.

  1. Create the integration recordUse the Client Credentials (Machine to Machine) grant and the REST web services scope. Note its client ID.
  2. Map a certificate to itUnder Setup, Integration, Manage Authentication, OAuth 2.0 Client Credentials (M2M) Setup, for a user whose read-only role may see transactions, accounts, subsidiaries, customers and vendors and run SuiteQL. An RSA or EC key works.
  3. Enter the details in NaarvinThe account ID (a sandbox looks like 1234567_SB1), the client ID, the certificate ID and the certificate's private key in PEM format.
  4. Choose the subsidiariesLink each to a new or existing company in Naarvin in the same currency, then confirm the account mapping.

Our team does these steps with you during onboarding, on every plan.

How often does it sync, and what does a sync read?

On the schedule you set, from every 15 minutes to once a week, or on demand. The first sync reads the whole ledger. Each later sync re-reads it from the first day of the month before the last sync, so entries deleted or reversed inside that window are marked deleted and back-dated postings are caught. Open documents are read in full every time, so the aging is always current.

How do approved journals get back into NetSuite?

Naarvin does not write to NetSuite. An approved journal is exported as a CSV file with one row per line: date, company, account code and name, debit, credit, currency, customer or supplier, descriptions and cost centre. Someone imports it into NetSuite and records NetSuite's reference in Naarvin. The file is UTF-8, so Arabic names open correctly in Excel. Journals are still approved in Naarvin first, as in Close AI.

What does the NetSuite connection not do?

  • It connects NetSuite OneWorld accounts only. An account without subsidiaries is refused with a message saying so.
  • It does not read customer or vendor VAT numbers.
  • It does not send journals or documents to NetSuite.
  • It is built and is checked in a first sync with your own subsidiaries before you rely on it. Some of the SuiteQL table and column names it uses are not in Oracle's public documentation, so compare the first month with NetSuite's own reports.

Questions people ask

Do we have to share a NetSuite password with Naarvin?

No. Naarvin signs in machine to machine with a certificate you register on an integration record, for a user with a read-only role.

Can we connect a NetSuite sandbox first?

Yes. Enter the sandbox account ID, which looks like 1234567_SB1, and test there before connecting production.

Which accounting book does Naarvin read?

The primary accounting book only. Secondary books are not read.

Why can Naarvin not post journals into NetSuite directly?

The NetSuite connection is built to read. Approved journals go out as an import file, and a person imports them and records the reference.

Where Naarvin helps

See it on your own books

A guided demo on Demo Group's books, then we connect one of your companies. In Arabic or English.