Deduplication doesn't remove duplicit role
During deduplication is duplicit roles compared with ?itself? or with another roles but in another way. For example: role A is compared with role B and in next step is compared role B with role A.
The result of this comparing is that identity still has duplicit role.
Workaround: run deduplication twice.
Affected version: ?