Thanks for all details which helped to reproduce an issue.
Sorry for delay with a solution. I re-tested a similar configuration, got the same result and reviewed my code after that. ‘Other roles access’ add-on restrictions are not applied for single site admins (administrator) role under multisite by default. But it’s possible to change this with a custom filter:
add_filter('ure_not_block_other_roles_for_local_admin','ure_not_block_other_roles_for_local_admin');
function ure_not_block_other_roles_for_local_admin($flag) {
return false;
}
