
This commit introduces new policies that control RBAC for assigning users roles on the system. Since the management of system roles is a system-level operation, each policy has `system` set as scope_types. bp system-scope Change-Id: Ie606e769427a5ca422997efe92402e712f3cf45f