Deny access right always has the highest priority. You cannot revoke it with Allow access right later.
Set Allow access right for Item Read and Descendants Read for your role:
And for extranet\everyone break the inheritance on the item:
With that set, extranet\everyone will not have Read access, cause there won't be any rule which allows it. You can use ...