I would like to retrieve historical updates to the stage field for a particular deal. Authenticating with a personal access token, I can use a GET on the endpoint /v1/deals/{id}/changelog, as described in the API document.
But when I use the same endpoint authenticating with OAuth, I get 403 errors.
I have specified deals: read as the OAuth permissions. But maybe I need different permissions for this to work. Or is this endpoint just not allowed under OAuth? And if not allowed under OAuth, where do I find the documentation on what works with OAuth, and what is forbidden?