What permissions are needed for a user to sign on to the third party app using the NetSuite as OIDC Provider?

AI generated answer (using internal Slack threads):

To sign on to a third-party app using NetSuite as an OIDC (OpenID Connect) Provider, the user needs to have a role with the OIDC permission enabled. This is because NetSuite allows the use of both SAML SSO and OIDC SSO simultaneously in the same environment, but these authentication methods cannot be used on the same role. Therefore, you must create separate roles, one with the OIDC permission and one with the SAML permission. ****** Disclaimer: This response was generated by an artificial intelligence assistant based on previous conversations from multiple Slack channels, and may contain inaccuracies or mistakes. ******