Roles typically do not change often.
It is strongly recommended that they be created in a Development client, then transported to Quality (tested, hopefully) and finally promoted to Production.
Roles should originate from the same client (pick one to be your “security development” client).
It is much easier to assign an existing Role to a User than to create or modify a Role.
SAP’s template Roles are intended only for example.
Best practice is to have Users tell you the exact Transactions they require and build Roles from scratch.
At the very least, copy them into your own namespace.
Be aware that many of them contain too much access so be careful!