Oneacl cluster rules

Has anyone had success running a oneacl create with the following

Rules Applies to : Group (select Grp)
Affected resources : Clusters
Resource subset Cluster (chose cluster)
Allowed Operation : Use

If not, does anyone know why that ACL might be prohibited?

I am getting an error for non oneadmin users " Not Authorized to perform Use Cluster [102]" if i do not have an ACL specifically defining user access to * CLUSTER/* USE *