403 on /api/v2/routing/queues with OAuth token

My Terraform module is blowing up with a 403 Forbidden when trying to fetch queue data via the /api/v2/routing/queues endpoint. The OAuth token is valid and I’ve got routing:queue:read in the scopes, but it keeps rejecting the request. Here’s the basic curl test I ran:

curl -X GET "https://myinstance.mypurecloud.com/api/v2/routing/queues" \
 -H "Authorization: Bearer $TOKEN"

Is there another scope hiding in the docs that I’m missing?