are you running the provisioning job as BLAdmins:BLAdmin or another user?
if it's another user you need either an entry for that role:user in users.local or you need something like:
We run the job as another user. So we added BLAdmins: rw,map=root to the users-file and it works.
Thank you for the hint!
i think you can also add 'BLAdmins:*' on 7.4.x