As an enhancement, I would suggest that when a user clicks on “Update Network”, there could be a pop up with a warning of what will be overwritten or a link to that information, with a suggestion that if they only want to push updated roles to subsites, then go to Root site and use “Apply to All Sites”.
Thanks,
Shweta
