Discrepancies between Security Roles assigned to users and Manage Data Access for Users

Content

We are seeing a lot of discrepancies between Security Roles assigned to users and Manage Data Access for Users.

e.g. One user had 10 roles added in security console and all 10 roles had BU access given Manage Data Access for Users. Then 5 roles were removed in security console and both the LDAP process run. 

Now, Security console shows 5 remaining roles. But, Manage Data Access for Users shows all the 10 roles data access.

Why this discrepancy? Should not the data access be removed with the roles being removed??

Version

20D