Sounds to me like working as designed. What is the problem you are facing?
As for the design, my favorite approach is to create the whole menu for everyone in one designated role (without any authorizations) and use that as a source when creating the final roles. In that way you make sure the structure is always consistent.