Hey,

First off what version of Asgard are you using?

About roles, if you have not changed anything in configs then Standart permission structure applied.
Which means that User specific permissions take over Role permissions, so make sure that User has no specific permissions for module-1, module-3 (Inherit).
Then make sure that role1 and role2 permissions do not contradict each other.

More info on official documentation