We have a Claude read only role. Someone is rightfully complaining that when they use Claude Cowork they have to login in each time with it if they were in their regular NetSuite role. Anyone have a good solution to this? Would logging into Claude in a different browser be a solution?

Yes, if you take the NetSuite URL you end up at when authenticating to NetSuite in Claude Desktop and drop it into an incognito window or different browser and choose the read-only MCP role, you will be able to maintain your normal role in your primary browser. But keep in mind that it still uses Oauth2 which will require regular re-authentication in the browser.