I suppose you're right @mattdahse I didn't really think of that. I can't think of any other way to get past the permissions on the customer role other than using a Suitelet though.