The page also states that the scope "ZohoCRM.settings.ALL" is adequate for the call.
The oauth token used has the scopes:
ZohoCRM.settings.modules.ALL,
ZohoCRM.modules.ALL,
ZohoCRM.settings.ALL,
ZohoCRM.users.ALL,
ZohoCRM.org.ALL,
ZohoCRM.notifications.ALL,
ZohoSearch.securesearch.READ
The user who created the oauth token is an Administrator.
The body of the response is
{
"code": "NO_PERMISSION",
"details": {},
"message": "permission denied to access the module",
"status": "error"
}
The call is being made in a sandbox environment.