Answer
Don't assume a 1:1 mapping — some permission-set behavior and default access changed between UI generations, so re-verify the effective access for a representative role rather than assuming it transferred exactly. See understand permission sets.