There is a difference among environment access options that Apigee UI offers and what we can do with apigeecli.
UI offers apigee.environmentAdmin role not supported by apigeecli.

Can we add support for missing role?