Following up on my last post it turns out that the conundrum is nothing but Enterprise Manager currently displaying things in a somewhat sub-optimal manner. The permissions etc are all there but they are just not being displayed under their respective permission class.
WLST confirms this when listing things with listResources(appStripe=”obi”)
So conundrum = just a hick-up 🙂