Turns out that DBMS_LOB access must be granted to a user and not a role. (As was the case.)