post not allowed suggests it's an issue with the way you're requesting. (ie: it's not a SOAP error) just to make sure you have Postman setup any working. i'd try using the rest roles endpoint (
https://rest.sandbox.netsuite.com/rest/roles) or the getDataCenterUrls SOAP method to make sure everything setup correctly. the SuiteTalk Platform Guide pdf is really pretty good. (search help center)