I currently have two user groups set up in "Privileged Users" to "monitor only". Only one of the groups is getting the "monitor only" privileges. The other group is getting whatever rules I have assigned. Does any one have any suggestions?
Turns out this was related to AD "OU" and an AD "Container". The group that was working properly was located in an AD "OU". The group that was not working was located in an AD "container". Once I moved the group from a "container" to an "OU" it work perfectly.