If a NetSuite username that is used in SyncApps has more than one role and default web service role is not specified for the user, SyncApps cannot be sure which role will be taken so the username will work if you set Administrator role (or specific role created for SyncApps) as the default web service role.
To set a specific default role for a Web services user:
1. Click Setup > Integration > Web Services Preferences menu.
2. Select the desired user from the Name drop-down list.
3. Select the default role to use for Web services requests for this user.
4. The internal ID for the selected role automatically populates the ID field.
5. Click Done.
6. Click Save.
If you still have a permission issue after setting the web service default role please contact firstname.lastname@example.org to enable a setting that will allow specifying Role ID explicitly in SyncApps like in the following screenshot.
Role ID for Administrator is: 3