Skip to content
elastly
Book a demo

Connect your system to Elastly

How to connect your ERP or store to Elastly with read-only access: the five connect steps, the role to create, and a worked NetSuite example.

Mohamed AshrafOct 24, 2026 · 4 min read

Elastly connects to your ERP or store with read access only. The connect wizard takes five steps: connect, verify access, discover, review and first sync. Elastly reads your products, customers, costs and orders, and nothing is written back to your system until you authorise quote write-back in a later step.

What you need before you start

  • An owner or admin in Elastly

    Only a workspace owner or admin can start the first sync.

  • An administrator in your system

    Someone who can create a role, an integration record and the credentials Elastly connects with.

  • One system of record

    A workspace has one system of record. Stores and other sales channels connect beside it.

  • A dedicated role

    A role that can read only what Elastly needs, assigned to the user Elastly connects as.

The five steps of the connect wizard

Open Integrations, choose your system and select Connect. The wizard keeps your place, so you can leave and return to the step you were on.

  1. Connect

    Enter the details your system issues, such as an API key, a sign-in or, for NetSuite, a certificate and three IDs. Credentials are stored encrypted. For certificate sign-in the private key never leaves Elastly.

  2. Verify access

    Elastly asks your system what the role can read and lists each area, such as items, customers, estimates and sales orders. Required areas must pass. Optional areas, such as exchange rates or cash sales, can be fixed later with Check again.

  3. Discover

    Elastly reads your live schema, applies the preset for your system, matches custom fields, resolves units and pack sizes, chooses a cost basis, links credits to invoices and filters out inactive records. Nothing is synced in this step.

  4. Review

    Confirm what Elastly found, or open Customise mapping to change a field. The workspace currency is read from your system's base currency. The wizard also shows the data region where your data will be stored.

  5. First sync

    Data starts to flow in. Progress and time left are measured from the pages already read, so the estimate settles once the first pages arrive. The guide What Elastly syncs explains what the first sync reads.

Connecting grants read access only. Quote write-back is a separate step that you authorise after a preview, and you can revoke it at any time.

Worked example: connecting NetSuite

NetSuite signs Elastly in with OAuth 2.0 client credentials and a certificate. An administrator completes these steps in NetSuite, with the Elastly connect wizard open beside it.

  1. Turn on the features

    In NetSuite, go to Setup › Company › Enable Features. On the SuiteCloud subtab, check REST Web Services and, under Manage Authentication, OAuth 2.0. On the Analytics subtab, confirm that SuiteAnalytics Workbook is checked.

  2. Create the role

    Go to Setup › Users/Roles › Manage Roles › New. If you are not sure what to grant, select Download a read-only role to import in the wizard's Verify access step. The file defines a web services only role named Elastly Integration.

  3. Assign the role

    On the employee record of the user Elastly connects as, open Access › Roles, add the role and save.

  4. Create the integration record

    Go to Setup › Integration › Manage Integrations › New. Check Client Credentials (Machine to Machine) Grant and the REST Web Services scope, then save. NetSuite shows the Client ID only once, when the record is saved, so copy it then.

  5. Download the certificate

    In the wizard, select Generate & download. Elastly creates the certificate and keeps the private key.

  6. Map the certificate

    Go to Setup › Integration › Manage Authentication › OAuth 2.0 Client Credentials (M2M) Setup and select Create New. Choose the user, the Elastly role and the integration record, upload the certificate and save. NetSuite shows the Certificate ID in the list.

  7. Paste the three IDs

    Enter the Account ID (Setup › Company › Company Information; a sandbox looks like 1234567_SB1), the Client ID and the Certificate ID, then select Connect.

The smallest NetSuite role a production connection has been proven on holds these permissions. The role file adds the other read permissions your account's features need, such as currencies, units and invoices.

  • Setup

    Log In using OAuth 2.0 Access Tokens (Full) and REST Web Services (Full).

  • Reports

    SuiteAnalytics Workbook (Edit). Every query Elastly runs needs it.

  • Lists

    Items (View) and Customers (View).

  • Transactions

    Find Transaction, Sales Order and Estimate (View).

Sandbox refreshesA NetSuite sandbox refresh removes the certificate mapping. Map the certificate again after each refresh, then select Check again in Elastly.

When a permission check fails

The Verify access step names the area that failed and the permission to add. Add it to the role in your system, then select Check again. Two NetSuite answers are easy to misread:

  • Every query is refused

    NetSuite answers "Your current role does not have permission to perform this action". The role is missing SuiteAnalytics Workbook.

  • A record is not found

    NetSuite answers "Record 'x' was not found" when the role lacks that record's permission, so the record exists but the role cannot open it.

Optional areas can stay unchecked while you start, and you can add them to the role later.

Price a quote on top of your ERP

Price a quote from your own historySend us a recent quote. We price every line live on a 30-minute call.
Integrations

Common questions

No. Elastly connects with a dedicated role that holds only the permissions it reads with. The connect wizard lists each area it needs and offers a role file you can import, so you never have to grant administrator access.