I created them under a folder under the managed network and yes the changes are pushed.
I can see the roles both - under the controllers in the managed network as well as if I log into the controllers directly.
I'm also getting a message, that I just notice, saying vlan_name is negative.