Custom role profiles are used when customizing default profiles that are assigned to the recommended roles. Making all changes for each role in its custom profile makes it much easier to debug problems or characterize the system if you ever need to call for service.
The root role has the Custom root Role profile assigned by default.
The Custom secadmin Role profile is nested in the Rights Security profile, which is assigned to the Security Administrator during configuration, as described in "Creating Roles and Users" in Trusted Solaris Installation and Configuration.
Before creating a new role or modifying the Security Administrator, Primary Administrator, or Operator roles, you need to create a Custom rolename Role and then assign it to the role.
See also "To Configure a New Role".
Before modifying the profiles for any role, make sure the appropriate Custom rolename Role is assigned, and make the changes in the custom profile.