ERM overwrites backend role without warning.

Question

We are on version 5.3 - SP13.
I have uploaded roles to our ERM installation. The upload was performed with the bulk download file collected via the /VIRSA/RE_DNLDROLES - program in backend in combination with the role information file which we have maintained with relevant role attribute data. The Org-level file is not relevant for us since our security concept does not include derived roles.
When we took the tool into use we discovered that even though the upload was completed successfully there are examples of roles which are created with non-identical content (authorization objects and field values) from the actual backend roles.
When we started performing changes to those roles, not identical in ERM and backend, via ERM, the system did not give a warning of the inconsistency but just directly overwrote the backend role with the incorrect ERM version of the role. 
Anyone else with experience with the same error?

Answer 1

Thanks Raghu and Frank for your replies!
What I did was:
1. Yes: I imported roles into ERM.
I made the assumption that the roles would be created correctly contentwise in ERM since the upload is done from a file which is directly downloaded from the backend system. I probably have some issues in this department as you have both already pinpointed.
Maybe the lack of including the OrgData file in the upload is the source for the error...?
Sorry about my stupid question Raghy, but how do I maintain the Org Data file? I see that the data columns are:
Rolename - Derived Org Level - From value - To value
Do I really have to maintain this manually when I do not have derived roles....?
(I see that there is a lot of org level values included in the system already from the initial upload.)
Do you have any general advise on how I can easily verify that my roles are created with correct content in ERM compared with the backend system?
2. Yes/No: I agree that if you generate a role from ERM, then you must know what you do and expect the backend role to be overwritten.
What I did was that I opened PFCG from ERM to make changes to the role.
I have in earlier test scenarios received a system messages at this point in the process asking me if I really want to overwrite the backend role. To my understanding this message is supposed to appear in any case when the ERM role is different from the backend role. Then I have the possibility to cancel the opening of PFCG and synchronize the role from backend to ERM before I continue with actually opening PFCG and performing the role changes.
I do not know why I get this message sometimes, but not always.....
Best regards
Kari