These are the permissions needed for the app service principal:

Catalog: Use Catalog

Schema: Use Schema 

Volume: Read / Write

To actually be able to read/write in the volume I had to use the Python databricks-sdk. Performing "normal" file system operations like cp or mv did not work.