Reporting Variance - Security Console vs Security Detail Extract

We would like to understand the source of truth for user roles and privileges. We have a report that is looping through the ASE_ROLE_ROLE_MBR table linking the child and parents roles, then looking up those roles in ase_priv_role_mbr to retrieve the role privileges. The report is returning the same roles as the Security Console, but the privileges differ.

Should the ASE_ROLE_ROLE_MBR table and the Security Console match? Please advise.