A bunch of people wasted a whole lot of time here today trying to figure out why REST API requests wouldn't work even though the company option was enabled and the role had REST Web Services permission, only to eventually stumble upon the fact that it also requires SuiteAnalytics Workbook permission. Why? We weren't trying to do anything with a workbook. Grrr. Definitely not following the Principle of Least Surprise