The parent application and the modules under it are accessible from the Nav bar for ITIL users even if the Application menu doesn't have ITIL role. Description<!-- div.margin{ padding: 10px 40px 40px 30px; } table.tocTable{ border: 1px solid; border-color:#E0E0E0; background-color: rgb(245, 245, 245); padding-top: .6em; padding-bottom: .6em; padding-left: .9em; padding-right: .6em; } table.noteTable{ border:1px solid; border-color:#E0E0E0; background-color: rgb(245, 245, 245); width: 100%; border-spacing:2; } table.internaltable { white-space:nowrap; text-align:left; border-width: 1px; border-collapse: collapse; font-size:14px; width: 85%; } table.internaltable th { border-width: 1px; padding: 5px; border-style: solid; border-color: rgb(245, 245, 245); background-color: rgb(245, 245, 245); } table.internaltable td { border-width: 1px; padding: 5px; border-style: solid; border-color: #E0E0E0; color: #000000; } .title { color: #D1232B; font-weight:normal; font-size:28px; } h1{ color: #D1232B; font-weight:normal; font-size:21px; margin-bottom:-5px } h2{ color: #646464; font-weight:bold; font-size:18px; } h3{ color: #000000; font-weight:BOLD; font-size:16px; text-decoration:underline; } h4{ color: #646464; font-weight:BOLD; font-size:15px; text-decoration:; } h5{ color: #000000; font-weight:BOLD; font-size:13px; text-decoration:; } h6{ color: #000000; font-weight:BOLD; font-size:14px; text-decoration:; } ul{ list-style: disc outside none; margin-left: 0; } li { padding-left: 1em; } --> Symptoms When the Application menu doesn't have ITIL role and a module under it has ITIL role , the parent application and the modules under it with ITIL role are shown in the Nav bar for ITIL users even with "override application menu roles" unchecked for the modules with ITIL role. Cause If the Application menu doesn't have ITIL role, a module has ITIL role(or the roles that ITIL role contains) and a module that has ITIL contained role has "override application menu roles" checked, then the ITIL role users are able to see the modules with ITIL role as well as ITIL contained role. In order to give access to the ITIL contained roles, ITIL role should first get access. So the application modules with ITIL role and the ITIL contained role are accessible from nav bar if one of the modules with ITIL contained role has "override application menu roles" checked Resolution The resolution is to adjust the roles and the override application menu roles for the nested modules accordingly.