Checking the code there should be a logged warning from ConstraintViolations in the nexus.log when this occurs that should have specifics about what the violation was.
I tried creating, enabling/disabling this capability without errors, the logged message may confirm it but given the only configuration option is the role name perhaps it was removed? If so maybe temporarily re-create a role with the same name which would allow you to update/remove the capability.