Role analyst was accidentally allowed to read payments, while its legitimate access to orders must remain. Remove analyst access to payments without changing the other permissions.