It’s worth to mention that in case you tested the same users: restrictions set at user level are still in action. They has a priority under role level restrictions. User and role levels restrictions are combined in role level uses the same ‘block model’ (prohibit or allow) as one set for user level.

I wait your setup copy to proceed with issue reason searching.