Why does the Selling Plan Group Create mutation deny access?

When using the selling Plan Group Create mutation from the graphql API, through a public app that already has access to the subscription API, it continues to give access denied