It was the provider. Because it was not a “full” account they’d monkeyed with some of the permissions in other places. I guess to prevent someone from doing something untoward.
They fixed them and it worked, but I went ahead and upgraded to a full server.
Having a different issue now but will open a different thread about that.
