I had that same issue. Here is the fix that worked for me
Configure exactly as you had it and click Submit. It will start then fail at the Role-query missing error.
Click Login again, fill it out exactly the same way and click submit again, and it will complete.
I can make it work consistently, at the cluster level, every time if I just do it twice, logging in after the first error.
To make the XML file work with 9.x you need to comment out lines 1585 and 1586. They will look like this
<!-- <command ontap-level-less="8.3">vserver services unix-group</command> -->
<!-- <command ontap-level-less="8.3">vserver services unix-user</command> -->
you might be thinking that you need them, no you don't. The lines right below them, that have ontap-level-greater-equals="8.3" have all of the individual commands listed.