403 on POST /api/v2/flows/executions with valid OAuth token

  • Ruby 3.2.2
  • Faraday 2.9.0
  • Genesys Cloud API v2

Quick question about launching Architect flows via POST /api/v2/flows/executions. My Faraday client sends a valid Bearer token and a minimal JSON payload {"flowId": "abc-123", "parameters": {"ext": "100"}}. The request returns a 403 Forbidden with {"code": "Forbidden", "message": "Access denied"}. The token works fine for GET requests on /api/v2/users/me, so scope seems okay. Am I missing a specific resource group or permission flag required to trigger flow executions from an external Rails middleware?