Control Compliance Suite 11 - Is SQL check "Are permissions assigned to roles rather than users?" reporting false positives?