- there is a default NSH role for each USER defind in RBAC module
- only the roles which have NSH authorizations may being presented , please check
- chrole command ro change the role
In particular do all the roles have the nsh proxy.connect authorization ?
Thanks Mike - it turns out that the proxy.connect authorization had not been provisioned as part of these roles, my RBACAdmin has now fixed it and all working sweetly.