403 calling Query API endpoints (Product=RE, Module=None)

Wondering if this is a known issue. I'm getting 403 errors calling Query API methods:

I'm passing the Bb-Api-Subscription-Key header and a valid access token. (The same subscription key and access token work for my constituent/membership API calls.)

And my subscription has access to the Query API:

58f71340e66a7db46dd9fc80d0c01164-huge-im

Is there something I'm missing about how to call these endpoints? Thanks!

Comments