Keeping security role changes

Are security role changes handled at the solution level? For example, if I wanted to rearrange the access levels for certain roles on CUSTOM entities and then export the solution I am working as managed, then importing on upgrade, could I retain the changes? 

Basically, I am just trying to figure out how to retain these security role changes and prevent overwriting them during an upgrade. 

Any help would be greatly appreciated!