Selectively allowing API endpoints

Hello, it seems that AAM is not allowing me to selectively allow/deny specific API endpoints.

This is what my policy looks like for the user:

{
    "Version": "1.0.0",
    "Dependency": {
        "wordpress": ">=5.5.3",
        "advanced-access-manager": ">=6.7.1"
    },
    "Statement": [
        {
            "Effect": "allow",
            "Resource": [
                "Route:restful:\/gg\/v1:get",
                "Route:restful:\/gg\/v1\/user:post",
                "Route:restful:\/gg\/v1\/glucose:get",
                "Route:restful:\/gg\/v1\/glucose\/check:post",
                "Route:restful:\/gg\/v1\/glucose\/get:post"
            ]
        }
    ],
    "Param": []
}

Yet when I try to make a post request to gg/v1/user, it tells me rest_access_denied. How can that be?

I am using the appropriate user credentials to get JWT and using that in the auth header.

Thanks.