Why does the matching users in a user segment show more than what is listed on the group or tags selected?
Other than the users matching the tag or group set in the condition, user segments also show users that have guide admin permissions on the list of matching users. Guide admins have full access to all articles in Zendesk Guide.
By default, administrators in Zendesk Support are Guide Admins. The team leader role also has a Guide admin privileges set. To modify agent access or roles for Guide, see the article: Changing an agent's role to grant Guide admin privileges.