I'm using OneFS 7.1.1.1 and I've configured the following role which works fine when I list SyncIQ policies.

yfvm-7111-2# isi auth roles view api
       Name: api
Description: -
    Members: api
 Privileges
             ID: ISI_PRIV_LOGIN_PAPI
      Read Only: True


             ID: ISI_PRIV_SYNCIQ
      Read Only: False
yfvm-7111-2#

I've created a local user called 'api' in the system zone local provider and I can successfully list SyncIQ policies with the following python script when connecting to an IP address in the system zone.

yfaubert@yfvm-deb1:~/papi$ cat get_cluster_sync_policies.py
#!/usr/bin/env python
import requests


papi_url = "https://192.168.32.221:8080/platform/"
authinfo = ('api', 'api')
syncinfo = "1/sync/policies"


if __name__ == "__main__":
    syncinfo = requests.get(papi_url + syncinfo, auth=authinfo, verify=False)
    print "DEBUG: Returned info is: " + str(syncinfo.json())


    for p in syncinfo.json()["policies"]:
        print "----"
        print "name: " + str(p["name"])
        print "id: " + str(p["id"])
        print "action: " + str(p["action"])
        print "source_root_path: " + str(p["source_root_path"])
        print "target_host: " + str(p["target_host"])
        print "target_path: " + str(p["target_path"])