Thank you for your quick response Manikandan!
I just ran the security query and noticed that none of the rights is denied. They are either granted or specified.
BUT I'm going to use the export to compare it with the the rights under BO3.1.
Maybe one or more of the rights aren't migrated as they should.