teams/<team-name>/members 403 response code for a private OAuth consumer

The following endpoint always responds with 403 for a private OAuth consumer:

https://api.bitbucket.org/2.0/teams/<team-name>/members

I'm having the same issue with:
https://api.bitbucket.org/2.0/users/<user-name>/members

I've tried replacing team-name, user-name with uuid and account_id to no result (following this blog post: https://developer.atlassian.com/cloud/bitbucket/bitbucket-api-changes-gdpr).

I believe the consumer has enough permissions: Account (write), Team membership (write), Repositories (admin).

Many other API endpoints work as advertised with the same credentials.