Hi Yan   Just to clarify -  admin works as expected with all/admin/   However both "all//read-all", "all//admin" AV pairs give me correct read-only rights on APIC, but if I ssh to the leaf or spine it gives me the abovementioned webtoken error when I...

Hi,   Just wondering did you get this resolved? As I'm having exactly the same issue. Wen I put all//admin in my AV pair i'm able to login however getting the following error when I try running 'show' command on the leaf.  Looks like a bug or undocum...