Project roles are being automatically assigned to users, even when autoprovision is turned off

Summary:

Project roles are being automatically assigned to some project resources, even when autoprovision is turned off.

Content (please ensure you mask any confidential information):

We disabled autoprovisioning from the Manage Enterprise Resource page, Manage project Roles, and Manage Project User Provision settings, yet users are still receiving project roles automatically(Both seeded and custom roles). Despite thorough checks, no causes have been identified. The audit report indicates modifications made by "Web Services Application Identity for HCM," but it's unclear how HCM processes could be provisioning project roles. Any insights or details would be greatly appreciated.

Version (include the version you are using, if applicable):