When a Role Based Services rbsRole object scope is set to the tree root and DSREPAIR is run, DSREPAIR invalidates the rbsRole object and makes it unusable.
This happens only when you make the assignment to the tree root; any other scope in the tree is fine. To prevent this, do not assign the tree root as a scope.
For more information, see Configuring Role Based Services.