[qa][policy] Testing strategy discussion for new RBAC (new scope and default role combinations)