Effective immediately: The following customer-related fields now require the write_customers scope and the create_and_edit_customers permission:
This is a companion discussion topic for the original entry at https://shopify.dev/changelog/customer-marketing-url-fields-now-require-write-access