i believe you still need this, i don't think it's been fixed. if wrodina can provide the ticket number I can see if the issue was addressed or not.
Add the following entry in users.local .
BLAdmins:BLAdmin rw, map=root
and then try.
The issue is that the request from the cleanup job comes across as the internal System:System role:user and therefore needs an explicit mapping.