Assuming that one user is assigned to two custom roles:
Role One: Admin privileges (everything)
Role Two: functionality x, functionality y
However funcionality x and functionality y is included also in Role One. How Access Control works, user will be assigned more rights (Role One) or the one with less rights (Role Two)?