We should enhance the spo site apppermission get command to show the roles granted to the specific permission. Right now the role is missing which makes it hard to understand what permissions the particular app has granted on the site.