Permissions for Tunnel Route

What token permissions are required to create a tunnel route using the API https://developers.cloudflare.com/api/operations/tunnel-route-create-a-tunnel-route?

I am trying to create a tunnel route using Pulumi but I am getting an error ‘Authentication error (10000)’. I suspect it is because the token does not have the correct permissions. The token currently has ‘Cloudflare Tunnel:Edit’ permission.