Go to the record from a role with access, then copy the URL and switch back to the role that needs the permission and paste it in. That will shoot you an error and tell you what permissions to add.