1st, it’s not enough to block just top level menu item if you wish to block full menu. You have to mark as blocked all unneeded submenu items too.
2nd, be sure that you test admin menu access at the same subsite where you made restrictions for the role. “Apply to all subsites” option from the main site works for the roles only. It does not replicate add-ons data. You have to use “Update Network” button from the “Network admin->Users->User Role Editor” page for this purpose.
Do you have active some other plugin related to admin menu management? Like “Admin menu editor” or similar? It’s possible to get conflict in this case.