This issue is resolved in VMware NSX-T Datacenter 3.2.2, available at Broadcom downloads.
If you are having difficulty finding and downloading software, please review the Download Broadcom products and software KB.
Workaround:
To override the default segment profile on a port created from vCenter (VM connected to segment port), you must use the Manager Mode UI: Logical Switches > Ports > Manage ->QoS/Spoof Guard/etc.