Dynamic Groups are not finding users in Active Roles.
The user object(s) were previously deprovisioned, and then manually enabled; however the attribute value for edsvaDeprovisionStatus=1 did not clear. Dynamic Groups will ignore users in a deprovision state, and will not add the user(s).
Open the Active Roles console to perform the following steps:
Note: If right-clicking the user object presents the Deprovision option, it may be less desirable to use this option as it will interrupt the current users functionality. In some instances an error may occur when selecting Deprovision for the affected user.
If using PowerShell, set edsvaDeprovisionStatus to $null.