Comparing the two json docs, it appears the one created by IPCTL strings off any 'null' values, which appears to cause an issue when it's imported.
Exported directly from Ops Manager UI
LDAP Elevated Access Management.json
Created from running ipctl export model
LDAP Elevated Access Management.model.json