The following permissions classified under Operations and Administrations are not supported for role-based access control per app using labels:
Operations
PERMISSION_ALERT, PERMISSION_ALERTCONFIG, PERMISSION_ALERTEMAILCONFIG, PERMISSION_ALERTSYSLOGCONFIG, PERMISSION_ACTIONGROUPCONFIG, PERMISSION_SNMPTRAPPROFILE, PERMISSION_TRAFFIC_CAPTURE
Administration
PERMISSION_CONTROLLER, PERMISSION_INTERNAL, PERMISSION_TENANT, PERMISSION_SYSTEMCONFIGURATION, PERMISSION_USER, PERMISSION_ROLE, PERMISSION_UPGRADE, PERMISSION_REBOOT, PERMISSION_TECHSUPPORT