To support org-level permission, we need three (root/default/org) parent roles.

For each of the parent role, we need different role bindings to bind them to the corresponding workspace/org. While currently, there is only one 
default_role_binding_uuid within the tenant mapping, which is used to bind to the default workspace.
 
We need to create two more