@alien4u the client side to server suitelet works because the session cookie is being sent with the request. Server to Server as silly as it sounds NetSuite doesn't seem to see it as authenticated.