MDS Web App: Choosing one person’s models tab causes an error

When administering few developers’/administrators’ accounts "Models" tab via MDS web page, one person causes an error with the following error report.

[ArgumentOutOfRangeException: startIndex cannot be larger than length of string.
Parameter name: startIndex]
   System.String.Substring(Int32 startIndex, Int32 length) +14690488
   System.Linq.<>c__DisplayClass7_0`3.<CombineSelectors>b__0(TSource x) +20
   System.Linq.WhereSelectArrayIterator`2.MoveNext() +75
   System.Linq.Buffer`1..ctor(IEnumerable`1 source) +162
   System.Linq.Enumerable.ToArray(IEnumerable`1 source) +104
   Microsoft.MasterDataServices.Core.BusinessLogic.Security.ToModelPrivileges(DataTable table, ResultType resultType) +1630
   Microsoft.MasterDataServices.Core.BusinessLogic.Security.GetModelPrivilege(RequestContext context, Int32 principalId, SecurityResolutionType resolutionType, PrincipalType principalType, ResultType resultType, Collection`1 results) +214
   Microsoft.MasterDataServices.Core.BusinessLogic.Security.PopulateModelPrivilege(RequestContext context, Collection`1 users, SecurityResolutionType resolutionType, ResultType resultType) +325
   Microsoft.MasterDataServices.Core.BusinessLogic.Security.GetUserSecurity(RequestContext context, SecurityPrincipalsCriteria criteria, OperationResult results, Boolean pruneDenies) +753
   Microsoft.MasterDataServices.Core.BusinessLogic.Security.GetSecurityPrincipal(RequestContext context, SecurityPrincipalsCriteria criteria, SecurityPrincipals principal) +482
   Microsoft.MasterDataServices.Services.Service.SecurityPrincipalsGet(SecurityPrincipalsGetRequest request) +149
   Microsoft.MasterDataServices.WebUI.ServiceAdapter.ExecuteRequest(MdmServiceOperation`2 operation, TRequestType request, String caller) +145
   Microsoft.MasterDataServices.WebUI.ServiceAdapter.GetModelPrivileges(Guid principalId, PrincipalType principalType, SecurityResolutionType resolutionType) +412
   Microsoft.MasterDataServices.WebUI.ServiceAdapter.CacheModelPrivileges(Guid principalId, PrincipalType principalType, SecurityResolutionType resolutionType) +104
   Microsoft.MasterDataServices.WebUI.ServiceAdapter.GetModelPrivilegesFromCache(Guid principalId, PrincipalType principalType, SecurityResolutionType resolutionType) +148
   Microsoft.MasterDataServices.WebUI.Common.ModelTreeview.GetModelPermissions(SecurityResolutionType resolutionType) +284
   Microsoft.MasterDataServices.WebUI.Common.ModelTreeview.LoadTree(Node parentNode) +345
   Microsoft.MasterDataServices.WebUI.Common.ModelTreeview.LoadData() +442
   Microsoft.MasterDataServices.WebUI.Common.ModelTreeview.LoadData(String principalId, PrincipalType principalType, DisplayModeType displayMode, Int32 modelId) +158
   Microsoft.MasterDataServices.WebUI.Security.Common.Models.LoadTree() +267
   Microsoft.MasterDataServices.WebUI.Security.Common.Models.LoadData() +16
   Microsoft.MasterDataServices.WebUI.Security.Common.SecurityEditPageBase.OnLoad(EventArgs e) +225
   Microsoft.MasterDataServices.WebUI.Security.Common.Models.OnLoad(EventArgs e) +22
   System.Web.UI.Control.LoadRecursive() +68
   System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +1381

All settings and rights seem to be similar between that person and other people. SQL Server is 2016 64bit with SP2 with CU1 (13.0.5149.0), IIS is version 8.5. 

Any idea what is wrong?