the Group the IAP-VC is set for the "GUI" config, so yes it has read/write (if you login to the cluster you cannot do anything but view)
I was able to correct this by factory defualting all 11 AP, deleteing from airwave, let the defualted devices cluster, then add it back to air wave. now the groups is working much better
it has 72 overrides before