do you have the suitelet executing as that role? whoever is accessing it externally doesn't have a role so it'd have to execute as the role you want (i believe)