Screen Recording API 403 on WFM schedule publish in Chicago env

I’ve spent hours trying to figure out why the Screen Recording API returns a 403 Forbidden when triggered during our weekly WFM schedule publish in the Chicago environment. We are running Genesys Cloud v24.5.0 and the agent has the correct role assignments.

POST /api/v2/recordings/screens
{
 "agent_id": "12345",
 "start_time": "2023-10-25T14:00:00Z",
 "reason": "WFM Schedule Publish"
}

The same payload works manually outside of the publish window. Is there a rate limit or a specific permission missing for automated triggers?