I'm trying to subscribe to eventsubscriptions for our surveys (starting with one survey at a time). The account I used to generate my API token is a "brand adminstrator" the level required according to https://api.qualtrics.com/9c31e43fef682-create-subscription
I've tried several different survey Ids, using api.qualtrics.com and our server "iad1", all with the same result

Access Denied

You don't have permission to access "http://iad1.qualtrics.com/API/v3/eventsubscriptions/" on this server.
Reference #18.acbf2617.1675883607.1198d907

How can this be? What permission do I need to have in order to successful subscribe to this endpoint? I'm thinking it's an organizational setting or something along those lines. I've been Googling for hours and can't really find anything other than the need to be a Brand Administrator which I definitely am already.
Anyone know what permission I need?
Thanks!