Answer
Before assuming the integration API itself is broken or missing a documented field, check whether the user/account associated with the calling IAM client is actually linked to a Person record in the application — a technical/integration account that's valid for authentication but not connected to a Person can trigger exactly this kind of confusing, seemingly-unrelated attribute error on this type of service request API.