I think (85% sure) that SDF can be used to create or update a role

Make that 100%. You can update the roles via the SDF. I just did yesterday. Although you need the permission IDs with the valid permission levels and I couldn't find it.

if you are looking for internal ids, you can always &xml=T your role.