INSUFFICIENT_PERMISSION while call API accounts:sendOobCode

[cg10]

The curl

curl --location 'https://identitytoolkit.googleapis.com/v1/accounts:sendOobCode?key=[API-Key]&tenantId=[tenant-id]' \
--header 'Content-Type: application/json' \
--data-raw '{
"requestType": "PASSWORD_RESET",
"email": "[email]",
"returnOobLink": true
}'

The API key has the required identity toolkit permission 

but despite of it I am getting error 

{
"error": {
"code": 400,
"message": "INSUFFICIENT_PERMISSION",
"errors": [
{
"message": "INSUFFICIENT_PERMISSION",
"domain": "global",
"reason": "invalid"
}
]
}
}

Please help me know where I am wrong?

[Marramirez]

Greetings @cg10,

Welcome to the Google Cloud Community!

You can try the following troubleshooting options:

1. Make sure that you are using the correct API_KEY, or if you're passing it correctly to your [API-Key]. To manage API keys, you must also have the API Keys Admin role (roles/serviceusage.apiKeysAdmin) on the project.
2. Try to look at this related GCC Post as you might have the same problem. 
3. If the above options don't work, you can contact Google Cloud Support to further look into your case. Let me know if it helped, thanks!