Hi,
If i am not wrong then your requirement is to exclude users who are in BW and ECC with role MSS.
I have checked your screen shot and User A0G0SC9 has MSS in the both ECC and BW.If you applied the var 3 filter it will exclude this user.
share the screen shot of user role where this condition is not matching.
Amit