In a multitenant EVS setup, individual tenants cannot manage their own elastic virtual switches and their resources because per-tenant user authorization for each user is not supported. The entire EVS domain must have a single administrator who manages resources of all the tenants.
The role that this administrator assumes must have the appropriate rights profile as described in Using Rights Profiles to Perform Network Configuration.
As a preferred alternative, you can use evsuser to perform EVS-related tasks. This user is created automatically when you install the pkg:/service/network/evs package. evsuser has all the required authorizations to configure EVS as well as observe EVS resources and statistics. For more details, see About SSH Authentication and the evsuser.