In the restrict to rolls area (under Dashboard Properties - open a dashboard and click the hamburger) you need to remove anything that's showing there for each of the dashboards that show as inactive. For us, PA_admin and PA_viewer seemed to have been added as default roles. Once I removed those, users no longer so these in the list.
Also make sure under access those groups aren't there.
Once those are removed, only the PA Admin or sys admin users should see the ones with (inactive) after their name.
