SDDC version 1.22 new API to add/edit VM tags did not have ORBAC permission for cloudadmin.
This will be fixed in an upcoming release.
Please contact VMware Cloud Support for assistance in having a workaround applied. This involves adding the missing permissions.
Creating and managing Broadcom support cases
Impact/Risks:
Users will not be able to edit the NSX tags.