I am trying to give the role view-users to a client using this API route:

https://my-site.com/admin/realms/my-realm/users/MY-CLIENT-SERVICE-ACCOUNT-ID/role-mappings/clients/REALM-MANAGEMENT-ID

I tried it on 2 Keycloak instances, it works on version 19.0.3 but version 26.4.1 responds with 403 Forbidden. The clients that I used to get my tokens have the exact same roles between the two versions (which include notably all of the "realm-management" roles).

Is there a version difference or something I'm not getting? How can I give the view-users role to a client using the API? Thanks.