bot signature - permission issue

You also need a Threat Campaign subscription to manually update Bot Signatures - otherwise you have to wait for whatever updates that are shipped with a major version release.

Bot signatures are a class of signatures what identify legitimate or malicious web robots by looking for specific patterns in the headers of incoming HTTP requests. With the release of BIG-IP 14.1.0, this feature requires a separate license. Bot signature updates are part of the Threat Campaigns subscription-based service license. Without a Threat Campaigns license, bot signatures cannot be updated using manual or automatic updates; however, you can still add custom bot signatures.

https://support.f5.com/csp/article/K82512024