shared mailboxes are give permissions via groups in a different forest
I think this is the cause. Cross permission works for Exchange online and Exchange on-premises, because there exist trusted relationship between them. However, there doesn't exist trusted relationship the Exchange online and the another forest.
You can try to assign permission again manually. I think there may still exist issue with it.
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.