Auth0 user management features do not appear to work for "new" Auth0 clients/tenants. The previous method to generate an Auth0 management API token has been replaced with a token generation process that expired tokens after 24 hours.
When fetching or mutating users, the back end should use something similar to this. One issue encountered in an initial attempt to fix this was that the grant_type: client_credentials nor the suggested alternatives client_secret_post or client_secret_basic were able to be used for the new Auth0 tenant being tested.