
This commit introduces new policies that control RBAC for assigning groups roles on the system. Since the management of system roles is a system-level operation, each policy has `system` set for scope_types. bp system-scope Change-Id: Ide491be9563f74f758c5de55990916292228e0d9