Listing OAuth clients via JS SDK without 403s

Trying to script an audit of all OAuth clients and their scope assignments using the Node.js Platform SDK. The oauthApi.listOAuthClients() call keeps throwing a 403 Forbidden even though my service account has the oauth:client:view scope. Is there a specific role requirement I’m missing or a different endpoint to hit for a full list?