GraphQL "Forbidden" error for super admin user

You need to enable permissions for the actual queries too. I believe the “me” query is available from the default which is why it worked.

You do this in the roles section of settings.