Role Membership Product

The client has discovered a user who has been assigned three business roles that are not available in the IT Shop. However, these assignments resemble active assignment requests. Does anyone have any insights into what might be happening here?

While conducting my analysis, I came across the Role Membership product that has been assigned to a user. However, I noticed that it doesn't have any category associated with it. How is this possible?