I want to move a couple of roles to a role sub container but what will the consequences be?

Trustees and DN attributes (including nrfAssignedRoles) should not need any work.
Policies, requests, lists and queries where nrfMemberOf is used needs to be changed.

Are there any other manual changes that I need to do?

Best regards,