Moving user to new role in Altiris Account Management

We are using ITMS 7.5 SP1 HF5 and I have to move a user out of Symantec Supervisors to Symantec Level 1 Workers, he should not have been in Symantec Supervisors to begin with. The issue is that even thought I have moved that user to Level 1 Workers that user can still see almost everything they had access to in the Symantec Supervisors role.

Does Altiris cache logon information and if so  where does it do that. I have also removed the users access to Altiris and re-added them with no luck. We use Windows Credentials as thier means to access Altiris so my delete and re-add was the same user account re-added.