Forbidden.

• if the user doesn't have access to or permissions to create within the specified parent folder.
• if the user doesn't have permissions to access the specified template to copy from.
• if the token authorizing the request has the document.app scope with a specified parent folder that is outside the app folder's folder tree.