microsoft-graph-api - callRecords change notification with authorization error

Question

When I was creating a subscription for change notification with callRecords via Graph Explorer. The request details as following:

URL: https://graph.microsoft.com/v1.0/subscriptions
Method: POST
Body:

{
    "changeType": "updated",
    "clientState": "23423423423423",
    "notificationUrl": "<my notification URL here>",
    "resource": "/communications/callRecords",
    "applicationId": "20371d19-5a23-406b-814c-84028b71d0f9",
    "expirationDateTime": "2021-10-29T10:28:28.2257768Z"
}

And I got the error as following:

{
    "error": {
        "code": "ExtensionError",
        "message": "Operation: Create; Exception: [Status Code: Forbidden; Reason: The request is not authorized for this user or application.]",
        "innerError": {
            "date": "2021-10-29T09:54:03",
            "request-id": "171a97fe-085b-4a2d-b119-70d70f110288",
            "client-request-id": "12630e64-cf34-b91a-6684-9bc8e9ba6442"
        }
    }
}

I have some googling, someone told it is problem with Access Token, but I don't know what access token I need to use.

Could you have some advices or solutions. Thanks in advance.