Which API token permissions are required for cloudflare_web_analytics_site

I’d like to create this resource (https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/web_analytics_site) to then connect it to a cloudflare_pages_project, but I can’t figure out which API token permissions are required.

My domain is already on cloudflare so I’m using account_id + zone_id

resource "cloudflare_web_analytics_site" "example" {
  account_id   = <my_account_id>
  zone_tag     = <my_zone_id>
  auto_install = true

Error: error creating web analytics site "": Authentication error (10000)

Seems like it’s not possible to enable analytics from terraform: https://github.com/cloudflare/terraform-provider-cloudflare/issues/2517#issuecomment-1617849763