Dedicated OCP environment : WASM ServiceMeshExtension failed to be applied

In a Dedicated OCP 4.6.8 cluster, the WASM ServiceMeshExtension failed to be applied

Error from server (Forbidden): error when retrieving current configuration of:
Resource: "maistra.io/v1alpha1, Resource=servicemeshextensions", GroupVersionKind: "maistra.io/v1alpha1, Kind=ServiceMeshExtension"

Name: "header-append", Namespace: "bookinfo"
from server for: "/tmp/kubeapply666105131.yaml": servicemeshextensions.maistra.io "header-append" is forbidden: User "yxun" cannot get resource "servicemeshextensions" in API group "maistra.io" in the namespace "bookinfo"

Environment Info:
OCP 4.6.8 Dedicated
OSSM: 2.0.1
SMCP v2.0

Test case: https://github.com/maistra/maistra-test-tool/blob/maistra-2.0/tests/sme_install_test.go