I think the logic should be

* create a new user foo
* assign foo admin role
* login as foo, verify admin menu accessible
* log out, log back in as session user
* remove admin role from foo
* log in as foo, verify admin menus not accessible