Admin user no longer able to create API tokens: permission denied

I’m logged in as the admin (owner) in my influxdb2 instance and when I try to create new API tokens in the web UI I get an error message “Failed to create API tokens: permission denied”. From the logs:

ts=2022-03-12T08:58:22.538249Z lvl=error msg="api error encountered" log_id=0_BAC8rl000 error="permission denied"

I had previously created an API token successfully on the same instance. Any ideas what could have changed to cause this?