I'm able to see all Global Variables, using '*' as the filter. A bunch of these are actually restricted for viewing via as-gvar EEM policy. Why is it happening
Release : 12.0
as-list EEM policy for autorep was enabled and All Identities was listed with the grant. This policy was over-riding the as-gvar policy's restrictions.
Set the as-list EEM policy for autorep to Explicit Deny, or remove All Identities from this policy and add selecting admin users who should be able to see all the variables even with as-gvar restrictions.