Security Profile mismatch during PureConnect skill migration

Hey everyone, we’ve got a timeline risk for our next cutover phase. Moving some legacy PureConnect skill mappings over to Genesys Cloud and the admin UI is throwing a fit. When trying to assign specific roles to the migrated users, the system returns a “Permission Denied” error even though the roles look correct in the UI. This is blocking our validation window for the next group of agents.

Saw a couple of community posts about role inheritance, but it’s not hitting the same way here. Tried checking the profile details via GET /api/v2/contentmanagement/securityprofiles/{securityProfileId} and the response returns the expected permissions, but the actual assignment in the admin console still fails with a 403. This is a huge red flag for the migration schedule if we can’t automate the profile push.