Client credentials grant returning 403 on WEM API

Trying to set up a background job to pull adherence data. Using client_credentials with the WEM scope but getting a 403 Forbidden.

POST /oauth/token
grant_type=client_credentials
client_id=...
client_secret=...
scope=analytics:read

The token comes back fine. Calling /api/v2/analytics/wfm/schedule fails. Do I need a different scope for the scheduler data?