Configure OCI Credentials for AI
If your company needs more than the free monthly usage for generative AI features in NetSuite, you can configure NetSuite to use your own Oracle Cloud account with OCI Generative AI Service. After you set up your account-level OCI credentials, you can enable Text Enhance, Prompt Studio, and the SuiteScript Generative AI APIs (N/llm module) to use them.
If you use the unlimited use model through your company’s Oracle Cloud account, your company pays for use of the Oracle Generative AI service. For more information, refer to the Calculating Cost in Generative AI section and the Billing and Cost Management section of the Oracle Cloud Infrastructure Documentation.
See these sections to manage your company's OCI configuration for generative AI features:
Before You Begin
If your company wants to use this option but doesn't have an Oracle Cloud account yet, refer to the Get an Oracle Cloud Account topic and the OCI Generative AI service topic Getting Access Using Policies in the Oracle Cloud Infrastructure Documentation.
After you have an Oracle Cloud account, add the OCI Generative AI Service. For instructions, refer to Getting Access to Generative AI and see the "Access to Generative AI Playground, Custom Models, Dedicated AI Clusters, and Endpoints" section for the policy you need.
Get the OCI configuration details from your Oracle Cloud account.
Refer to the Oracle Cloud Infrastructure Documentation for the linked topics in the following list.
The configuration details you'll need are:
-
User OCID: For more information, refer to Managing Users.
-
Compartment OCID: For more information, refer to Managing Compartments.
-
Tenancy OCID: For more information, refer to Managing the Tenancy.
-
Fingerprint: The OCI fingerprint of the public key. For more information about the OCI fingerprint, refer to Required Keys and OCIDs.
-
Private Key: The OCI user's private key, which will be in a PEM file (for example,
oci_api_key.pem). For more information about the OCI user's private key, refer to Required Keys and OCIDs. -
Endpoint ID: Only needed if you've set up a dedicated AI cluster through Oracle Cloud. For more information, refer to Hosting an Endpoint in Generative AI.
Enable and Configure OCI Credentials for AI in NetSuite
Use the OCI configuration details from your Oracle Cloud account, described in the Before You Begin section, to complete the steps below.
To enable and configure OCI credentials:
-
Go to Setup > Company > AI > AI Preferences.
-
On the Settings subtab of the AI Preferences page, check the Use OCI Configuration to Get Unlimited Usage box.
After you check the box, you'll see the OCI configuration fields.
-
Fill in these fields with values from your Oracle Cloud account:
-
User OCID
-
Compartment OCID
-
Tenancy OCID
-
-
Next, you'll need to create NetSuite API secrets for the OCI fingerprint and OCI private key. Storing the OCI fingerprint and OCI private key as API secrets enhances security of these OCI credentials in NetSuite.
-
Click Create your API secrets here. The API Secrets page opens in a new browser tab.
-
Click Create New. The Create New Secret dialog opens. Create the API secret for the OCI fingerprint as described below, then click Save.
-
On the Details tab:
-
Make sure the ID starts with an underscore, because the system adds a prefix custsecret when you save. For example, if you enter _oci_config_fingerprint, the ID will be custsecret_oci_config_fingerprint after you save.
-
Enter the OCI public key fingerprint value in both the Password and Confirm Password fields.
-
-
On the Restrictions tab, use the following settings so that any of the generative AI features managed from the AI Preferences page can use the API secret:
-
Check the Allow for All Scripts box.
-
Enter _none_ in the Restrict to Domains field.
-
-
-
To create the API secret for the OCI private key, click Create New again. The Create New Secret dialog opens. Complete the fields as described below, then click Save.
-
On the Details tab, complete Name and ID similarly to how you did for the fingerprint, but upload the private key file instead of entering values in the Password and Confirm Password fields.
-
Use the same settings on the Restrictions tab.
-
After you create the API secrets, they are shown on the API Secrets page.
-
-
Go back to the AI Preferences page and enter the IDs of the API secrets in the API Secret for Fingerprint and API Secret for Private Key fields.
-
Click Validate credentials to test the OCI credentials you entered.
-
If everything's set up correctly, a confirmation message ("Credentials were successfully validated") is displayed.
-
If there are errors in the setup, an error message is displayed. Errors are displayed one at a time. Correct the error and click Validate credentials to test again. Repeat until the confirmation message is displayed.
Note:Each successful validation counts as one use of the OCI Generative AI service.
-
-
Click Save.
-
Next, set up the generative AI features to use the OCI credentials. Go to the subtab on the AI Preferences page to enable the feature to use the OCI credentials. You can choose to have some, all, or none of the generative AI features use OCI credentials.
For example, to use OCI credentials for Text Enhance, click the Text Enhance subtab on the AI Preferences page, check the Use OCI Credentials for Text Enhance box, and click Save.
For each feature you set up to use OCI credentials, NetSuite stops using the limited, free usage mode. NetSuite switches to the paid, unlimited usage mode through your Oracle Cloud account with the Oracle Generative AI Service.
For more information, see the following topics:
-
For each feature you set up to use OCI credentials, test the new setup.
For example, if you've set up Text Enhance to use OCI credentials: Go to a page that has a field with Text Enhance and try a valid action. For more information, see Text Enhance.
-
If everything's set up correctly, the Text Enhance action works, and your current month's free usage count should remain the same.
-
If there's a problem with the setup, you'll see a Task Unavailable error. Go back to the AI Preferences page, Settings tab. Click Validate credentials. Fix the error shown and repeat until you receive a successful confirmation message.
Common errors and how to resolve them:
-
On the AI Preferences page, Settings tab, verify that the OCI configuration parameters have the correct values for your Oracle Cloud account.
-
On the AI Preferences page, Settings tab, verify that NetSuite API Secret IDs entered correctly. Also verify that they match the secret IDs (not the secret names) shown on the API Secrets page.
-
On the API Secrets page, verify that the OCI fingerprint and OCI private key secrets were created correctly.
-
-
Disable OCI Credentials for AI in NetSuite
You can disable OCI use by all NetSuite generative AI features managed from the AI Preferences page. This overrides all Use OCI credentials settings on the features' subtabs.
To disable OCI credentials:
-
Go to Setup > Company > AI > AI Preferences.
-
From the Settings subtab on the AI Preferences page, clear the Use OCI Configuration to Get Unlimited Usage box.
Note:The OCI configuration fields are hidden on the Settings subtab, but they're not deleted. If you check the Use OCI Configuration to Get Unlimited Usage box again, the fields are shown with your last saved values still there. If you want to remove the OCI credentials completely, clear each field one by one, then disable the OCI credentials.
-
Click Save.
-
After you disable OCI use on the Settings subtab, NetSuite goes back to the free, limited usage mode for all generative AI features managed from the AI Preferences page, no matter what each feature's setting is. You'll see the monthly free usage limits and used quantities in the usage tables on each feature's subtab.
-
When the OCI credentials are disabled, you can't change the Use OCI credentials settings for individual features. The settings on the feature subtabs are still shown, but they're overridden when OCI use is disabled on the Settings subtab.
-