For users with multiple different Permits in NetDMR with different level of role for each permit, the highest role is the default for migration, correct?

Only the account information are migrated to use CDX login.  All roles remains untouched in the NetDMR.