Perfect, that helps. Since you’ve tried both paths and have full access, this is likely a callback/token binding issue between VAPI and the GHL sub-account (pretty common).