Hi Jennifer

Yes that is what I was meaning - prohibiting the admin functions in this role would mean that anyone assigned both roles then the learner role would win over the permission in the admin role as prohibit always wins.

regards