CRM 2016 update 1, error in Security Role, user has admin role

Hello

Thanks for your attention

I have a problem about Security Role in CRM 2016 update 1- on premise 

I create a Role: only privilege at  Account, Contact and Case and assign this role for a user

But this User can see and create/update all entities: lead, opportunity, product.... (same role with admin), and I sure this user has only 1 role.

Role:

User 

User can see

Please show me what i was wrong in this setup.

Thank you.