For anyone hitting this, I was able to workaround this problem by adding 4 'dummy rules' to the default policy set's Authorization Policy. We weren't using the default policy set for our production auths and it only had the default authz rule in it. By adding in th 4 dummy rules DNAC got what it 'expected' and this error stopped occurring.