WEM API 403 on BYOC Trunk Agent Login Events

Can anyone explain why the Workforce Engagement Management API returns a 403 Forbidden error when querying agent login events for our AP-Southeast-1 BYOC trunks? The same request succeeds for PSTN lines. We verified the IAM role has the correct permissions.

Environment:

  • Genesys Cloud Region: AP-Southeast-1
  • API Version: v2
  • Endpoint: /api/v2/wfm/schedules/availability

The error suggests a scope mismatch, but the token includes the required WEM scopes.