Getting 403 Forbidden on /api/v2/routing/queues despite having admin scope

Hit a 403 when calling GET /api/v2/routing/queues via our internal service. The token has admin:queue and admin:org scopes. Here’s the snippet:

headers = {'Authorization': f'Bearer {token}'}
requests.get(f'{base_url}/api/v2/routing/queues', headers=headers)

The response is empty with status 403. Is there a hidden scope requirement for queue endpoints in v2? The OTel trace shows the auth header is passing through correctly.