Hi @pete_h ,
I think the error codes are not always up to date with changes to the API so unfortunately, I cannot give a definitive answer on sorting the complexity of scopes and permissions, but I’ll not this as something we need to address.
From everything you’ve shared, it seems like you are calling the endpoint correctly and have things on the account/permission side set up properly.
What do you see when you call it with me?