Restricting report access to read only using Application Role

Hi,

In HCM (Reports and Analytics), We are trying to restrict reports access to read only for particular users using Application role. For that created a new role assigned to user and ran security jobs. Later logged into HCM application using BI Administrator, in the folder properties added a new role and gave read permission and saved changes. Then reloaded Metadata. After completing all these steps, logged into user to verify the access, still user has full access. Can anyone pl. let me know if there are any other steps that involved in grating access to reports. Any help is