@Matt W the NS user from the triggered script execution context needs to have access one way or another to the search, just like a regular user in the UI accessing a search