@Rana123H
This is done by the logic in identity refresh to specifically ignore the role assignment with negative=“true”
Please check once below communication.