the role needs to be setup to access whatever it is you want to access with that role... TBA (in general) is just another way to log into netsuite that isn't a user pass. The only permission i believe you need for logging in is "Log in using access tokens" or "User Access Tokens"