I'm trying to clean up user permissions and found that some users have been assigned multiple roles with different settings.

Which role takes precedence?

For example, say in role A a user can View AP Invoice Data Entry and in role B they can Create AP Invoice Data Entry.

My assumption is that the higher role takes precedence, i.e. a user assigned both roles A and B will be able to Create AP invoices.