When using Prefect 3, calling a PATCH request through the REST API requires not just an API token but also appropriate permissions associated with the user's role. Prefect allows for custom roles with specific permissions, and these roles determine what actions a user can perform, including making PATCH requests. The permissions are managed within Prefect's role-based access control system.
For more details, you can explore the documentation on managing roles and permissions:
Manage Roles and
Manage API Keys.