Roles typically do not change often.
It is strongly recommended that they be created in a Development client, then transported to Quality (tested, hopefully) and finally promoted to Production.
Roles should originate from the same client (pick one to be your “security development” client).
It is much easier to assign an existing Role to a User than to create or modify a Role.
SAP’s template Roles are intended only for example.