Edit: I just had to restart the computer - perhaps a login-logout would’ve sufficed for the udev rules to take effect? (brightnessctl adds some rules to allow non root users in the video and input groups to manipulate the necessary device, in my case intel_backlight.)