FThis says that the calling user doesn't have enought manager rights to perform that request.
FThe management api is basically for managers of organizations. so if you would give the user for example org_owner role it should work
Fthe auth api is for the authenticated user, and yes the user is not allowed to change its one metadata