While in Artifactory UI it's not permitted to create a permission target that contains virtual repository there is no validation for creating permission target that contains a virtual repository via "Create or Replace Permission Target" REST API command