If they are not assigned into this role within this course it's possible they have been assigned the role at the course category or site level.
The reports look at the capability "mod/scorm:savetrack" - the role you use to assign these users probably has this capability and you should probably remove it and review the other capabilities as well to make sure they can't do other things they shouldn't.