Looks like a clusterrole needs groupification. You need to update `namespace-admin` to include "security.openshift.io" and "" as groups for the "securitycontextconstraints" resource
Does updating that role fix the problem?
Yes, updating the role resolved the issue for the customer.