RHEL 7.4 UI - Inconsistent Permissions

Ever since upgrading from RHEL 7.3 to 7.4, the IPA UI drops certain user permissions -- but in a very strange way. Note: this only happens in the UI, command line permissions are normal

1. Log in to the UI
2. Select a User, go to their profile/settings
3. Click 'reset password' in the the actions dropdown -- it works as expected
4. If I click off of user settings/profile and go to a new tab (such as that user's groups), then return to the user settings/profile, I am no longer able to reset their password -- the option is grayed-out

It gets even stranger, however.

If I make any change to that user's settings (e.g. add another email address), and click save, my permissions are restored and I can then reset their password (among other things -- such as disable account)

I'm not seeing anything unusual in the logs (access, messages, httpd access/error)

Any hints are much appreciated!