I figured it out by looking at the SQL Plan Cache after assigning the Analytic Privilege using the UI. I saw a statement that looked like this:
call GRANT_ACTIVATED_ANALYTICAL_PRIVILEGE(?,?);
Knowing that the ? are markers for parameters, I guessed that the command should look like this.
call GRANT_ACTIVATED_ANALYTICAL_PRIVILEGE('_SYS_BI_CP_ALL','LUMIRA1');
Sure enough, it worked!