Precedence of security roles for custom BIP reports

Content

If we have 2 roles attached to the BIP report, one of them should have Read, Traverse access and another one should not have access what would be the precedence of security roles attached to the BIP reports? Apparently both of these roles have underlying BI Consumer role due to which both of them getting access to the report. 
Currently I have report which has 2 roles. Line manager should have access and Analyst Lite should not have access. When I assign these roles to the report folder, the folder is not visible to the user who has both of these roles. The expectation is, as the user has the Line Manager role, the folder should have been visible.