That is correct behavior. Refer to the OTA API documentation for the Command object, which says:
"Because of the risk, use of the Command object is restricted. For information about security and rights to use the Command object, refer to the HP ALM Administrator Guide."
"Because of the risk, use of the Command object is restricted. For information about security and rights to use the Command object, refer to the HP ALM Administrator Guide."