Sadly, it is a common failing of manual pages to parrot the SUS and its wording for implementation-defined behaviour rather than document the concrete operating system at hand:
Whilst the #Illumos manual page leaves the loophole open, the actual kernel code does not make same-session checks and never returns EPERM from getpgid().