Can't signin with YouTube TV (Android 7.1.2) missing GET_ACCOUNTS or EXTENDED_ACCESS permission

Google account is signed in, but when click on sign in from Youtube TV, nothing happens.
Below is logcat:

clientId=android.media.AudioManager@d55ef0dev.cobalt.media.CobaltMediaSession@b66bc69
08-15 14:49:04.003  4845  4867 D SafeParcel: Unknown field num 10 in com.google.android.gms.common.internal.GetServiceRequest, skipping.
08-15 14:49:04.003  4845  4867 D SafeParcel: Unknown field num 11 in com.google.android.gms.common.internal.GetServiceRequest, skipping.
08-15 14:49:04.003  4845  4867 D SafeParcel: Unknown field num 12 in com.google.android.gms.common.internal.GetServiceRequest, skipping.
08-15 14:49:04.004  4845  4867 D GmsFeedbackSvc: bound by: GetServiceRequest{serviceId=FEEDBACK, gmsVersion=13280000, packageName='com.google.android.youtube.tv', extras=Bundle[{}]}
08-15 14:49:04.770  4845  4858 D GmsAuthProvider: Call from com.google.android.youtube.tv
08-15 14:49:04.775  4845  4858 W GmsAuthProvider: Not granting extended access to [com.google.android.youtube.tv], signature: 61226bdb57cc32c8a2a9ef71f7bc9548e95dcc0b
08-15 14:49:04.776  4845  4858 E DatabaseUtils: Writing exception to parcel
08-15 14:49:04.776  4845  4858 E DatabaseUtils: java.lang.SecurityException: Access denied, missing GET_ACCOUNTS or EXTENDED_ACCESS permission
08-15 14:49:04.776  4845  4858 E DatabaseUtils:         at org.microg.gms.auth.AccountContentProvider.call(AccountContentProvider.java:65)
08-15 14:49:04.776  4845  4858 E DatabaseUtils:         at android.content.ContentProvider$Transport.call(ContentProvider.java:400)
08-15 14:49:04.776  4845  4858 E DatabaseUtils:         at android.content.ContentProviderNative.onTransact(ContentProviderNative.java:283)
08-15 14:49:04.776  4845  4858 E DatabaseUtils:         at android.os.Binder.execTransact(Binder.java:565)
08-15 14:49:04.777  5293  5758 E starboard: Error getting signed-in account
08-15 14:49:04.777  5293  5758 E starboard: android.os.RemoteException: Accounts ContentProvider failed: Access denied, missing GET_ACCOUNTS or EXTENDED_ACCESS permission
08-15 14:49:04.777  5293  5758 E starboard:     at bbp.b(SourceFile:23)
08-15 14:49:04.777  5293  5758 E starboard:     at bpo.a(SourceFile:3)
08-15 14:49:04.777  5293  5758 E starboard:     at bpp.a(SourceFile:13)
08-15 14:49:04.777  5293  5758 E starboard:     at com.google.android.libraries.youtube.tv.account.TvUserAuthorizer.c(SourceFile:25)
08-15 14:49:04.777  5293  5758 E starboard:     at com.google.android.libraries.youtube.tv.account.TvUserAuthorizer.authorizeUser(SourceFile:7)

Start with org.microg.gms.auth.AccountContentProvider.call at AccountContentProvider.java:65 and trace the permission decision in GmsAuthProvider. Use the provided logcat and the YouTube TV authorization path through TvUserAuthorizer to reproduce the failure. Done means the account lookup no longer fails with the missing GET_ACCOUNTS or EXTENDED_ACCESS exception.