We upgraded our LDMS to 9.5 from 9.0SP3 last night, and also upgraded Data Analytics to 9.5 (previously on the latest 9.0 build).
After the upgrade, users that have NO access according to their roles for Data Analytics can still see the entire menu in their console. While some of the options do not launch, two of them do.
"Console Extender, and Discovery Services"
In addition, there is a Typo on the Asset Control permission row in role based administration. It is currently spelled "Asest Control".