POST /me/onenote/sectionGroups/{id}/sections — 403/40004 with Notes.ReadWrite (Delegated) on SharePoint-backed notebook

I have a confirmed delegated token with Notes.ReadWrite in the scp claim. According to the v1.0 documentation, this is sufficient for POST /me/onenote/sectionGroups/{id}/sections (work/school account, delegated).

The API returns 403 / error.code 40004 with the message: "Please make sure you are including one or more of the following scopes: Augloop.Spo.Acquire, Features.Read, Files.Open, Notes.ReadWrite.All"

The notebook is stored on OneDrive for Business (SharePoint-backed). POST /me/onenote/notebooks/{id}/sectionGroups with the same token returns 201 — so the token and auth flow are correct.

Augloop.Spo.Acquire, Files.Open, and Features.Read are not in the Graph permissions reference. Is there a known discrepancy between the documented and actual permission requirements for this endpoint on SharePoint-backed notebooks?

Token scp confirmed via jwt.ms: Notes.ReadWrite openid profile User.Read email