How to remove all roles that allow creating new AP invoices like Payables Invoice Creation roles?

Hi,

Customer has requirement that some users should not be able use tasks below:

• Create Invoice
• Create Invoice from Spreadsheet
• Create Recurring Invoices
• Import Payment Requests

I created a copy of existing custom role ‘Aalto Accounts Payable Specialist’ (tasks need to be removed from this role at the end) and named it as ‘Aalto Accounts Payable Specialist TEST’ in test environment. Then I started by removing only one role “Payables Invoice Creation (Role code: ORA_AP_PYABLES_INVOICE_CREATION_DUTY_OBI)” from the new custom role. The new custom role was then assigned to one test user only. It has also ‘Aalto ERP Self Service User’ role and nothing else. But when testing the user could still manually create a purchase invoice. After that I removed two more roles: