"User management tab" permission broken

Since version 5.2.0 of the miniOrange module, users who have been assigned the "User management tab" permission to manage all users 2FA including reset 2FA for user accounts can no longer reset or disable user accounts. They can see the "User Management" and "Report Section" tabs at /admin/config/people/miniorange_2fa/user_management, and can search users in the "User Management" tab. However, clicking on "Reset" or "Disable" in a user's "Actions" column redirects to the access denied page.