The user was not in the sysadmin group NIS+ tables.
# niscat group.org_dir | grep sysadmin sysadmin::14:
