When a custom role has an administrative and a publisher privilege but not 'Publish server-based layers' and 'Publish web tools' privileges, a user with this role can erroneously publish server-based layers and the geoprocessing service from ArcGIS Server Manager.