Authorize API from function called by async event queue

That is correct. Refer to FRGE-805 and also watch ROADMAP-48

Also refer to this forum thread where the topic was last discussed.

Suggestions?

Well, since the Get bulk permissions endpoint will only ever return 1,000 results in a single search, you’ll just have do multiple, sequential requests to get those “several thousand issues” that you’ll have to process thereafter.

Why not just start with a more specific search that represents a set of Issues the user needs to view for a particular context or scenario… which will return a much smaller dataset?