By not using the "Deny" option on registered users actually does allow access back to the administrator. So this does work.

My next question: What is the benefit of "Deny"?

For instance: I have a user that is in multiple roles such as Advertisers and Realtors. This user has paid a subscription for both roles and utiilizes advertizing in my website, yet also sells realestate. I set up specific modules for each role but want to deny access to modules based on a given role. However when denying access from one role, it will also deny access to that user who should actually have access based on their other given role.

Again, I suppose the correct answer would to be not to use "Deny" and simply allow access to only those specific roles. Then, I'm back to my question "What benefit is "Deny"?. Does anyone have any use cases or ideas for use?