Hi Katherine
I agree with no access to generate (repair) directly in production as the next transports will over-write and destroy the temporary fix in PRD if the roles have the same state in DEV/QA.
You need to move incorrectly transported roles to PRD to solve the problem permanently.
Are the roles generated (or is it that they require profile comparision)?
Moving SOME derived roles for your own change is 'selfish' if this is the real cause rather than all of the roles not being 'generated'.
Best wishes
David