In Endpoint Protection Mobile management console, while trying to add 'tag' rules in your AirWatch full integration section, you might receive "403 Missing Permissions" error.
Check the Read and Edit permissions. The permission description is: "Grants permission to access tag management".
Click Save.