Unable to Manage Work Plan After Removing Privilege "Manage Project Work Plan Baselines"

Summary:

Hi,
We created custom roles with the objective of removing the privilege "Manage Project Work Plan Baselines" in order to prevent users from setting a baseline during project execution, while still allowing them to manage all other Work Plan activities (dates, dependencies) during execution.

We compared the custom roles against the seeded roles (as shown in the attached screenshots), and the only difference identified between the custom role and the seeded role is the removal of the "Manage Project Work Plan Baselines" privilege.

However, after assigning the custom roles to our test user, we are observing unexpected behavior.
The test user still has the privilege "Manage Project Work Plan" through the two custom roles: Custom Project Manager LOB, Project Execution LOB.