But this same user was able to add new organization units? Or is this the first time this user account attempts to create an OU? (If there were OUs added by the same user before then we are sure it’s not a configuration issue.)
Please check out these recommendations from @bobj in a similar post: