The Sunflower FOLIO upgrade introduced a new model for assigning authorizations to users built around roles, capabilities, and capability sets. This is a significant structural change from the system of permissions and permission sets used previously. The new model requires site coordinators and other local FOLIO administrators to update their understanding of how to manage user authorizations going forward. In addition, since the old system of permissions did not map directly to the new role-based model, it is quite likely that some extra roles were created in your FOLIO tenant during the upgrade that you may wish to clean up sooner or later.