create new record button is visible although create privilege is disabled

Hi All,

I have disabled create privilege for Contact Entity in a custom security role but still +New Button is visible and able to create and save the record also from that role. I have check default (BU) team's security role but no roles are assigned there as well.

As standard behavior as per security role, this + New Button shouldn't be visible or at least the system should give privilege error while saving the record.

I am new to Dynamics and this a bug in production, I need urgent help.

Regards,

Persis