I don't have the exact steps to solve as a coworker found the issue. I'm guessing whoever initially set up access did not allocate the proper access at both levels, resulting in the least restrictive permission being enforced.