In addition to the "normal" permissions, there are also permissions that hand out sub-permissions (Dynamic permissions). The sub-permissions can be seen in the interface at 'Business Rules', 'Entitlements', 'Granted', however, when the granted entitlements are exported you will only see the entitlements in the Business Rule. In the export you cannot see which sub-permissions have actually been granted.

One of the reasons to get insight in the sub-permissions via the CSV export is for the Role mining report. This report uses the export to compare all the entitlements of the employee with the entitlements handed out by HelloID Provisioning.