Here are my findings:
3CX V20 build 20.0.8.1121. Service Principal apiusername configured per Admin Console → Integrations → API:
Department: DEFAULT
Role: System Owner
3CX Configuration API access enabled
Reproduced with three SPs including one created from scratch with System Owner from...