Product Version: 2.7
Admin users need the cloud_controller.admin_read_only scope for App Metrics to work. Simply add that scope to the admin users.
The following is the command to allow an admin user account to view all apps once you point uaac CLI to Tanzu Application Service's (TAS's) UAA.
$ uaac member add cloud_controller.admin_read_only
Note: Instructions on how to use uaac to connect, target, and get a token capable of adding this scope can be found at here: https://techdocs.broadcom.com/us/en/vmware-tanzu/platform/tanzu-platform-for-cloud-foundry/4-0/tpcf/uaa-user-management.html