Symptoms:
This issue is resolved in VMware NSX for vSphere 6.4.0, available at Broadcom Downloads.
To work around this issue if you do not want to upgrade, add the role for nsxmanager@localos as Enterprise Admin as well along with role for nsxmanager@domain if it exists.