Scenario
Custom Roles encounter the following permission violation message when uploading a file or sending an email with HTML attachments: “Permission Violation: You need the ‘Allow JS/HTML Uploads’ permission to access this page. Please contact your account administrator.”
NetSuite implemented a stricter policy for uploading files with .js and .html suffixes to the file cabinet. To upload these types of files, you will require the Allow JS/HTML Uploads permission.
This permission is required for uploads that occur through the UI, Scripts and Web Services.
To resolve this, add permission to Custom Role:
- Login as Administrator
- Navigate to Setup > Users/Roles > Manage Roles
- Custom Role: Click Edit
- Click Permissions
- Click Setup
- Permission: Select Allow JS / HTML Uploads
- Click Add
- Click Save
Note: If the affected user is using an Employee Center role which is not possible to be edited, you’ll need to add the permission as a Global Permission on the Employee Record.
- Login as Administrator
- Navigate to Lists > Employees > Employees
- Employee Record: Click Edit
- Click Access
- Click Global Permissions
- Permission: Select Allow JS / HTML Uploads
- Level: Select Full
- Click Add
- Click Save
Note: If the Global Permissions subtab is not available under the Employee record’s Access tab, you might need to enable it first.