Seems your api user doesn't have rights to access customers, give it access to update customer details