Getting forbidden error when trying to create a workspace using the dotnet core SDK

I am using the dotnet core SDK with a service principal and I need to create a workspace. 

My code looks like this

var credentials = await Token.GetTokenCredentials(clientId, clientSecret, tenantId);
using (PowerBIClient client = new PowerBIClient(credentials))
{
  GroupCreationRequest request = new GroupCreationRequest
  {
    Name = "MyNewWorkspace"
  };
  await client.Groups.CreateGroupAsync(request);
}

The service principal corresponding to the client has the following API permissions

• Capacity.Read.All
• Capacity.ReadWrite.All
• Workspace.Read.All
• Workspace.ReadWrite.All

  Is there some admin level setting that I need to be aware of?