CXone Personal Connection API 403 on outbound call trigger

NICE CXone API & Integrations
1

Trying to fire an outbound call via the Personal Connection API but keep hitting a 403 Forbidden. The token has the right scopes, so it’s not auth. Here’s the payload I’m sending to /api/v2/outbound/calls:

{
 "callType": "outbound",
 "to": "+1234567890",
 "from": "+0987654321"
}

Docs don’t mention any extra perms for this endpoint. What am I missing?