Make the user log out, log in. In some cases, you might even need to remove role then add role to make it work.