Error set up permission to SDN zone via API using token

[kemeris]

Hi, token has PVEAdmin permission for "/" path with propogate, but always getting error:

403 Permission check failed (/sdn/zones/z100007, Permissions.Modify)

Other API endpoint calls working fine. Any ideas what could be wrong?

curl 'https://x.x.x.x:8006/api2/json/access/acl/' --insecure -v\
  -X 'PUT' \
  -H 'Authorization: PVEAPIToken=netbox.zeusman.lt@pve!netbox=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx' \
  --data path=/sdn/zones/z100007\
  --data groups=g100007\
  --data roles="SDN.Use"\
  --data propagate=true

Tokens permission:



I would appreciate for help.