cannot create rest role access system manager

Hi All,

We try create 9.10.1 RBAC access OnTap System Manage for operation as below.

- domain user with operation_team role as below cannot login System manager

- when domain user change to default readonly role, login System Manage no problem

- the operation_team missing /api/security compare with default readonly role, we try add /api/security but failed and display "Error: command failed: failed to set field "cmddirname" to "anti-ransomware volume""

- volume did not setup anti-ransomware

I cannot found solution in google or mysupport.netapp.com