I noticed that a token with `execute-sql` permission alone did not work, because it was not allowed to view the instance of the database.