Citect 2018 R2 - Active Directory group permissions

Hello,

We are in the process of upgrading some of the functionality of on one our systems which uses Citect as the SCADA. One of these upgrades is requiring a user to login using their employee number and active directory account which is assigned to one of three groups. These groups are for production operators, maintenance, and engineering. We upgraded the system from Citect 7.3 with the Service Pack 1 to Citect 2018 R2.

The problem I am having is that a couple of the buttons that should be invisible to the operators are not. When I check the group permissions it looks ok and each group is named after the active directory work groups. Any advice is appreciated.