#1 The admin/coadmin row in the second table did not tell the difference between admin and coadmin.
#2
Certain flags give you other flags by default:
According to my interpretation, I believe global has local flags (which are "can_rehash", "helpop", "can_globops", "can_wallops", "can_localroute", "can_localkill", "can_kline", "can_unkline" and "can_localnotice") with additional "can_globalroute", "can_globalkill" and "can_globalnotice" flags.
admin/coadmin has global flags with additional "can_dccdeny" flag.
services-admin has global flags with additonal "can_dccdeny" and "can_setq" flags.
[this also means services-admin has admin/coadmin flags with additional "can_setq" flag.]
netadmin has global flags with additional "can_dccdeny" and "can_setq" flags.
[this also means netadmin has services-admin flags without additional flag.]
[which also means netadmin has admin/coadmin flags with additonal "can_setq" flag.]
Please correct me if I am wrong.