With a hint from a colleague and some trying, the query now runs successful when using the Postman setting "X-WWW-form-urlencoded"
It even works with only read access granted to the API user.
