Organization admin role doesn't have permission to edit host's Puppet classes

I just recently configured a user with “Organization admin” role, so I cannot answer the question if it worked before.

I can tell you that the user is associated with specific organization and location (the same organization and location in which the host is “located”).

Manager role doesn’t work either.