Are you using grant_type=client_credentials? If so, that’s an App token and as it doesn’t represent a user it wont work.
grant_type=client_credentials