it turned out the admin account I was using could apply for the capability but if granted, I had to use the organization admin account to activate the signing.
Topic:
App Store Distribution & Marketing
SubTopic:
App Store Connect
Tags: