Description of problem (please be detailed as possible and provide log
snippests):
The test cases given below failed because PVC snapshot cannot be created.

tests/manage/pv_services/pvc_snapshot/test_pvc_snapshot.py::TestPvcSnapshot::test_pvc_snapshot[CephBlockPool]

tests/manage/pv_services/pvc_snapshot/test_pvc_snapshot.py::TestPvcSnapshot::test_pvc_snapshot[CephFileSystem]


Error logs :


could not sync content "snapcontent-ff5d47dc-0a3c-4da2-8bf5-c97a560f2174": failed to add VolumeSnapshotBeingCreated annotation on the content snapcontent-ff5d47dc-0a3c-4da2-8bf5-c97a560f2174: "snapshot controller failed to update snapcontent-ff5d47dc-0a3c-4da2-8bf5-c97a560f2174 on API server: volumesnapshotcontents.snapshot.storage.k8s.io \"snapcontent-ff5d47dc-0a3c-4da2-8bf5-c97a560f2174\" is forbidden: User \"system:serviceaccount:openshift-storage:rook-csi-rbd-provisioner-sa\" cannot patch resource \"volumesnapshotcontents\" in API group \"snapshot.storage.k8s.io\" at the cluster scope"
I0127 13:58:15.997577       1 snapshot_controller_base.go:167] Failed to sync content "snapcontent-ff5d47dc-0a3c-4da2-8bf5-c97a560f2174", will retry again: failed to add VolumeSnapshotBeingCreated annotation on the content snapcontent-ff5d47dc-0a3c-4da2-8bf5-c97a560f2174: "snapshot controller failed to update snapcontent-ff5d47dc-0a3c-4da2-8bf5-c97a560f2174 on API server: volumesnapshotcontents.snapshot.storage.k8s.io \"snapcontent-ff5d47dc-0a3c-4da2-8bf5-c97a560f2174\" is forbidden: User \"system:serviceaccount:openshift-storage:rook-csi-rbd-provisioner-sa\" cannot patch resource \"volumesnapshotcontents\" in API group \"snapshot.storage.k8s.io\" at the cluster scope"
I0127 13:58:15.997641       1 event.go:285] Event(v1.ObjectReference{Kind:"VolumeSnapshotContent", Namespace:"", Name:"snapcontent-ff5d47dc-0a3c-4da2-8bf5-c97a560f2174", UID:"bcdc3616-5a4a-4495-80a0-af40b5b7269b", APIVersion:"snapshot.storage.k8s.io/v1", ResourceVersion:"100679", FieldPath:""}): type: 'Warning' reason: 'SnapshotCreationFailed' Failed to create snapshot: failed to add VolumeSnapshotBeingCreated annotation on the content snapcontent-ff5d47dc-0a3c-4da2-8bf5-c97a560f2174: "snapshot controller failed to update snapcontent-ff5d47dc-0a3c-4da2-8bf5-c97a560f2174 on API server: volumesnapshotcontents.snapshot.storage.k8s.io \"snapcontent-ff5d47dc-0a3c-4da2-8bf5-c97a560f2174\" is forbidden: User \"system:serviceaccount:openshift-storage:rook-csi-rbd-provisioner-sa\" cannot patch resource \"volumesnapshotcontents\" in API group \"snapshot.storage.k8s.io\" at the cluster scope"



must-gather  logs - https://ceph-downstream-jenkins-csb-storage.apps.ocp4.prod.psi.redhat.com/job/ocs-ci/802/artifact/logs/failed_testcase_ocs_logs_1643286773/
===========================================================

Version of all relevant components (if applicable):
OCP 4.10.0-0.nightly-2022-01-26-234447
ODF 4.10.0-125

Does this issue impact your ability to continue to work with the product
(please explain in detail what is the user impact)?
Yes, PVC snapshot creation failing

Is there any workaround available to the best of your knowledge?
No

Rate from 1 - 5 the complexity of the scenario you performed that caused this
bug (1 - very simple, 5 - very complex)?
2

Can this issue reproducible?
Yes

Can this issue reproduce from the UI?
Yes

If this is a regression, please provide more details to justify this:
Yes, the feature was working in ODF 4.9 and the previous internal builds of 4.10

Steps to Reproduce:
1. Create PVC snapshot

OR 
Run these tests:
tests/manage/pv_services/pvc_snapshot/test_pvc_snapshot.py::TestPvcSnapshot::test_pvc_snapshot[CephBlockPool]

tests/manage/pv_services/pvc_snapshot/test_pvc_snapshot.py::TestPvcSnapshot::test_pvc_snapshot[CephFileSystem]



Actual results:
Snapshot creation is not succeeding

Expected results:
Snapshot creation should be success.

Additional info: