Very impressive if 9 roles can hit maximum profile. Most places I've seen this is due to 300+ roles assigned to the user.
Redesign and build again to fix root cause. Short term is to compare the roles to see if all of them are necessary
I suspect this question was meant to be more about using you security knowledge and showing you can critically analyse and problem solve
Finally, end your question with fire your architect and let me design and build security so you never have to ask this question again. Smile of course to show confidence.
regards
Colleen