Security Role is not working as expected

I have extracted the security roles and users from prod environment to dev environment. i am changing the security role in dev environment.

I have deleted all the assigned roles except open application role but still user have all the access as in Prod environment. 

can some help to fix this issue?