SIP Trunk Registration 401 with Multi-Org Service Account

Stuck on a 401 Unauthorized error during SIP trunk registration via the BYOC API. The service account has full admin scope, yet the X-Genesys-Organization header seems to be ignored during the initial handshake. Verified auth tokens are valid per Genesys Docs. Any insights on scope isolation?