Superset Add user with REST API

I am getting Error in reponse to /api/v1/security/users/

I am trying to insert new user with REST API in Apache supersetwhat i did:

1. I have sent post request to /api/v1/security/loginwith json body - I got access_token

2. this access_token I sent to /api/v1/security/users/ with json body

{"active": true,"email": "@","first_name": "","last_name": "","password": "$@","roles": [1],"username": ""}

in response i get

{"message": "Forbidden"}

what i am doing wrong ?