Hi Vladimir,

We’ve managed to narrow down the plugin causing the problem: W3 Total Cache. When deactivated on our staging site, the Production role has the correct areas restricted. However, we use W3TC extensively across our site. Are you aware of any conflicts between the two plugins, or would you have a recommendation for the best course of action to resolve it? I can provide screenshots if necessary.

Thanks again for helping out with this!