The second script prints out the current permissions for Database, Schema, Object and column. It also creates the revoke script for each. I also included the class, User, objectname in the output to make filtering easier.
The first script scripts to role memberships and also the removal of the role membership.