In the reconsiliation report of the governance module only entitlements created by the provisioning module are seen as valid permission. Assignments created by the Service Automation should also be incorporated in the reconsiliation report to give an accurate report and find discrepancies.