The APIM image from dockerhub or WSO2 registry comes with wso2carbon user having a specific user id and your environment might not allow full permissions to that user id.

Try check the UUID of the user wso2carbon by checking inside the container maybe it set to 802 as uuid so try changing it.