The reason the folder itself is not gaining access is because I did not tell iCacls that I wanted it to inherit access. The team should be:
iCACLS.exe \\server\serverroot\siteroot /grant:r domain\id:(OI)(CI)(RX) /T /C
What I need (and for predictable reasons. I like it.)
source
share