For me it looks like the CPPM is returning access accept messages only (CPPM Monitor mode: https://community.arubanetworks.com/community-home/digestviewer/viewthread?MID=22277) and these messages are having the wrong/or missing VSAs (https://community.arubanetworks.com/blogs/esupport1/2020/04/10/arubaos-switch-error-message-05204-dca-failed-to-apply-user-role-reported-in-the-log-file).
The error message is kind of confirming this (Description: User role VSA received for the client is invalid or does not exist.)
Event ID: 5204: https://support.hpe.com/hpesc/public/docDisplay?docId=a00093582en_us
Did you try the critical authentication with no connection to the CPPM?
At Aruba, we believe that the most dynamic customer experiences happen at the Edge. Our mission is to deliver innovative solutions that harness data at the Edge to drive powerful business outcomes.
© Copyright 2021 Hewlett Packard Enterprise Development LPAll Rights Reserved.