The user was not in the system administration group NIS+ tables.
# niscat group.org_dir | grep sysadmin sysadmin::14:
