Dynamics crm portal security web roles not matching permissions.

Hello,

I have 2 Web Role records in CRM that are related to our CRM Portal (formerly ADX Studio).  I have created an Entity Permissions record for Role 1, the permission is for the Account entity.  It is set at the 'contact' scope level, using the contacts_customer_accounts relationship.  I then have a second role, Role 2.  Role 2 does not have an entity permission for Account.  When I change the Account Permission tied to Role 1, it will update what I can see/edit when logged in with Role 1.  I then login on a different browser to a user with Role 2 and the same change takes effect.  If I give the permission Write access, both Roles can then write to the Account, even though Role 2 does not have an Account Permission record assigned.

I am hoping someone may be able to point me in the right direction for a possible overlap.  The 2 users do NOT have multiple roles, 1 role each.

Account Permission.

Role with Account Permission

Role without Account Permission