This is in Jira SD Cloud and this person had left and returned to work within 30 days. Atlassian sees the user as deactivated and suggests the problem is on the Azure AD side. Apparently the sync isn't working.