When logged into AAI with a JAWS domain admin level user, it allows you to create a user in the EEM domain.
EEM users should only be added through EEM, either directly or through an LDAP domain added to EEM.
AAI 24.3.x and earlier
This will be resolved in the AAI 24.4 release.