Can’t publish Ads via Graph API from HTTP module (permissions?)

I’m trying to create an ad using the Facebook Graph API from Make’s HTTP module. The request fails and I suspect a permissions issue.
Current user token scopes: business_management, pages_read_engagement, pages_manage_metadata, pages_read_user_content, pages_manage_posts, pages_manage_engagement.
I don’t have ads_management / ads_read.
Do I need those to create ads, or is there another required permission/setting? Any guidance on the minimal scopes and app/business requirements would help.
(If needed I can share the exact endpoint/payload and error JSON.)