Access denied when using OAuth client credentials flow to create shared mailbox

Question

Short version:

How to correctly set up application permissions and/or role assignments and/or something else that I\'m missing, so that application i