Sharepoint Rest API Permissions to create a Site

Hello,

I'm trying to create a Sharepoint (Modern Site) using Rest Api with an access token, however I get in the end the 401 Unauthorized error. I have granted the Azure Enterprise App all the Sharepoint API permissions, however still nothing (at the same time with the same access token I can run Graph API commands and I get response). Can anybody advise what else should I do be able to use Sharepoint API?

Thanks in advance!

Import-Module MSAL.PS

#Variables
$ClientID = "XXX"
$ClientSecret = "XXX"
$ClientCertificate = Get-Item "Cert:\CurrentUser\My\XXX"
$tenantID = "XXX"
$scope = "https://XXX.sharepoint.com/.default"
$authority = "https://login.microsoftonline.com/$tenantID/oauth2/v2.0/token"

$Body = @{
  "grant_type"    = "client_credentials";
  "client_id"     = "$ClientID";
  "tenant_id" = "$tenantID";
  "ClientCertificate" = "$ClientCertificate";
  "scope"      = "$scope";
}

#Get AccessToken
#$result = Invoke-RestMethod -Method POST -uri $authority -Body $body
#$AccessToken = $result.access_token

#Get AccessToken with MSAL
$AccessToken = Get-MsalToken -ClientId $ClientID -TenantId $tenantID -ClientCertificate $ClientCertificate -Scope $scope
# Inspect the Access Token using JWTDetails PowerShell Module
$AccessToken.AccessToken | Get-JWTDetails

#Create Event
$headers = @{
# "Authorization" = "Bearer "+ $AccessToken;
# "Authorization" = $AccessToken.CreateAuthorizationHeader();
# "Authorization" = "Bearer "+ $AccessToken.CreateAuthorizationHeader();
 "Authorization" = "Bearer $($AccessToken.access_token)"
 "Accept" = "application/json;odata.metadata=none"
}

#Create JSON Object
$json = @"
{
    "Title": "Communication Site 1",
    "Url":"https://XXX.sharepoint.com/sites/commsite1",
    "Lcid": 1033,
    "ShareByEmailEnabled":false,
    "Classification":"Low Business Impact",
    "SensitivityLabel": "None",
    "Description":"Description",
    "WebTemplate":"SITEPAGEPUBLISHING#0",
    "SiteDesignId":"6142d2a0-63a5-4ba0-aede-d9fefca2c767",
    "Owner":"******@XXX.com",
    "WebTemplateExtensionId":"00000000-0000-0000-0000-000000000000"
}
"@

$uri = "https://XXX.sharepoint.com/_api/SPSiteManager/create"
Invoke-RestMethod -Method POST -Uri $uri -Headers $headers -Body $json 

The remote server returned an error: (401) Unauthorized. Same with the command below

$uri = "https://XXX.sharepoint.com/_api/SPSiteManager/status?url='https%3A%2F%2F<tenantXXX>.sharepoint.com%2Fsites%2FAcademy'"
Invoke-RestMethod -Method GET -Uri $uri -Headers $headers