CASB admin's with rights assigned through a admin profile are unable to create or modify a CASB Policy.
Assigning all available rights to the admin profile does not resolve the issue.
SysAdmin's are able to create and modify policy.
Broadcom is aware of the issue and planning to resolve the issue.
Workaround: Promote the user to a SysAdmin until the issue has been resolved.