An issue exists in Jamf Pro prior to 10.32.0, aka PI-009921. An account can be granted incorrect privileges in response to authentication that uses specific sign-on workflows.
jamf jamf