WFM API: 403 Forbidden on /api/v2/wfm/schedule after Zendesk migration

Could use a hand troubleshooting this 403 error when hitting /api/v2/wfm/schedule via the REST API. We are migrating workforce data from Zendesk Sunshine CTI to Genesys Cloud and trying to automate schedule generation.

In Zendesk, the admin API key had blanket access to all agent data. Here, the token works for user profiles but fails on WFM endpoints. The error response says Insufficient permissions for resource. Is there a specific OAuth scope like wfm:schedule:write that needs to be added to the integration, or is this a role assignment issue in the Admin console?