There were a couple of things:
1. The user profile that pushed the transport to PROD needed to have SAP_ALL (per note 1744329).
2. The user profile first logging into the BPC web admin client to assign users security also needed to have SAP_ALL in order to see the environment to set it online and to begin assigning users to the security profiles.
It could be that only item #2 was the resolution for this, but we had some errors in the UJA Data Checker that were completely resolved by clearing out the previous attempt to transport and then importing the transport with SAP_ALL access on the user profile performing the import.