AP manager role gets access to AP read only role's BU
We have BU1, BU2, and BU3.
We assigned the AP manager and AP read-only role to user A.
AP manager with BU1 and BU2.
AP read only role with BU3.
But the user A can still create invoices for BU3.
How to prevent this happening?
Version (include the version you are using, if applicable):
Code Snippet (add any code snippets that support your topic, if applicable):