Invalid Request inviting an API application using the graph API

Hi,

I have one API application using OAuth for delegated permissions, and a second API application that uses client credentials. Using the OAuth application, I am trying to allow a user to authorize the client credentials application to read a particular folder or folders in SharePoint. But I'm getting an invalidRequest error in response. Here's the request I'm sending:

Endpoint:

https://graph.microsoft.com/v1.0/drives/<drive-id>/items/<folder-id>/invite

Body:

{
  "requireSignIn": true,
  "sendInvitation": false,
  "roles": ["read"],
  "recipients": [
    {
      "objectId": "<API-client-application-object-id>"
    }
  ]
}

Response:

{
  "error": {
    "code": "invalidRequest",
    "message": "The request is malformed or incorrect.",
    "innerError": {
      "date": "2024-07-09T23:00:50",
      "request-id": "<request-id>",
      "client-request-id": "<client-request-id>"
    }
  }
}

First, is what I'm trying to do even possible? Can an API application using delegated permissions invite another API application that uses client credentials to access a folder? Is there another preferable approach? The end goal is that someone can log in using OAuth for the first application, browser their folders and select one that the client-credentials application can access going forward. (The client-credentials application runs in a background process and can't be dependent on the OAuth token.)

And second, if this is the right approach, is there anything obviously wrong with my request? The JSON seems to match the driveItem-invite docs here.

Any help is greatly appreciated. Thanks in advance!