Hi Madhu
Basically this issue happened because of a program which customer IT team used while adding/removing tcodes from a role
Hope you are doing something about the custom program
To get a report you would need to join to table AGR_1250 which is the authorisation header table. Match the role, object, authorisation (cover multiple) against the AGR_1251 values. Then you can filter where AGR_1250 has DELETED <> X (Active) whilst AGR_1251 has DELETED = X (Inactive)
If you get a result, then you have an issue.
Regards
Colleen