figured it out… the user had not logged out of the account since permissions were changed for that role…