The root cause was that I needed to grant the user select permissions as well since the mutation also returns specific fields (in this case id).
The root cause was that I needed to grant the user select permissions as well since the mutation also returns specific fields (in this case id).