The policy uuid of default platform-default group has been used as the parent role of platform-default roles.

To support org-level permission, we need three (root/default/org) parent roles.

Where/how to store this uuid?

Manually created uuid is acceptable in this case. If we import them through env variable, don't forget to set them in app-interface