Hello Chung,
The KB you referenced is correct. The classic version of OCSM used ZAPI calls, where the new version uses REST-API.
As the Solution section of the KB states, the "security login rest-role" command set must be used to manage roles for the new experience OCSM.