Also check the Account for role membership.

Any mappings are in addition to and not instead of the Accounts current roles.