I’ve tried to replicate your work, and it seems correct to me.
Can you try adding a breakpoint after the “Call REST” action, and check the Variables tab to see if the attributes are correctly set?
It maybe you have security set so the user running the microflow doesn’t have access rights to create objects and set attribute values.