Teamcity Permissions

if a user has a direct assignment to “Run Build” but does not have Run to run their build. They can view it.
What can override a direct role assignment to a project. Group assignments are overriden by direct roles correct ?
so what could be issue