Microsoft and the APIs are a bit annoying setting the credentials and permissions, so you are probably just missing a permission of the rest is working fine.
So yeah you will need to double check the permissions given to the credentials you are using.