Hi Patrick,
I collected the role in a fresh transport again and released for QA and PRD and it worked fine. (role is green automatically)
But I am still not clear why it didn't generated with the first transport. It happened twice (with different custom objects).
We always move our custom auth objects/t-codes first then move our PFCG role transport.
Regards,
Salman