403 when attempting the use any of the private APIs

I think I ran into a similar circumstance and it ended up being because (maybe?) I was including too many fields in the POST body. Check out the request body in this post. I narrowed my update down to just the attributes it had and it worked. dateType IdentityProfile attribute issue - #4 by AnamicaShroti

{
  "displayName": "MyCustomAttr",
  "name": "mycustomattr",
  "searchable": true,
  "sources": [{
      "properties": {
        "ruleName": "Cloud Promote Identity Attribute",
        "ruleType": "IdentityAttribute"
      },
      "type": "rule"
    }
  ],
  "type": "string"
}