Hybrid to entra migration user became admin

Hello So weird issue Migrated a device and user from win 10 from one tenant to another User is a standard user and works fine

Windows 11 same process same user but the user is able to elevate as admin despite the account been a standard user account?

Has anyone seen this behaviour when using the provision packages to migrate a device cross tenant?

Stumped I can see entra has a setting now to say registering user is added as local administrator on device during entra join but the provision package doesn't run as the user and it doesn't affect win 10

Help would be great!