Using user credential requires setting Postman to No Auth, then adding a custom Authorization header in the NLAuth format (there are many examples in SuiteAnswers). But, I would use it for testing only. NetSuite plans to deprecate that authentication method in the near future.