The error is because the openshift webconsole itself will try to list the mobileclients if the CRD is defined (we created the PR to the openshift webconsole a while ago). This means that we need to at least give all authenticated users to read permission on the mobile clients. I have created a PR to address this: https://issues.jboss.org/browse/AEROGEAR-9690, and will bring it in to the installer as well.