Invalid operation requested: Can not change allowed ip list this ruleset, it is owned by system service.VMware vCenter Server 8.x
This an expected behavior. The "NFS Client" firewall ruleset is owned by system service.
It can confirm that 'Allowed IP configurable' for the nfsClient ruleset is set to false using the below command.
# esxcli network firewall ruleset list
Name Enabled Enable/Disable configurable Allowed IP configurable
--------------------------- ------- --------------------------- -----------------------
nfsClient true false false