neutron port-create --allowed-address-pairs fails with policy doesn't allow error

Issue

When we try to create a port with --allowed-address-pairs option it fails as follows:

# neutron port-create private --allowed-address-pairs type=dict list=true ip_address=0.0.0.0/0
Policy doesn't allow (rule:create_port and rule:create_port:allowed_address_pairs) to be performed.