Roles typically do not change often.
It is strongly recommended that they be created in a Development client, then transported to Quality (tested, hopefully) and finally promoted to Production.
Roles should originate from the same client (pick one to be your “security development” client).