Seeded roles Vs Custom Roles

We are implementing Oracle fusion at one of our healthcare clients and would like to know the best practice when it comes to implementing security. Is it advisable to create a copy of all seeded roles and assign custom roles to the users? What happens to the custom roles when the seeded roles are updated as part of the refresh?