The developer of the system found out that they weren't using the correct python functions to support user-assigned identities. They just tested with VM identity, not a user-assigned one.

They updated the code, and now it works.