When ESXi role privileges are updated, they do not persist after ESXi reboot.
ESXi fails to save updates to persistent storage.
The issue is limited to modification of existing roles.
Privileges granted during role creation remain after reboot.
This issue has been resolved in 8.0U3.
Workaround:
As a workaround, updated privileges can be saved by creating a dummy role.