Can you just generate the create role xmla scripts and run them after you deploy changes to the AX cube?

AX 4.0 doesn't provide much administrative support for SSAS.