LPS-31368 Passing in -1 or a blank "" should result in the scope group ID default (that was the old behavior)
LPS-32350 initialize default permissions of Role User over Control Panel Portlets only when the Role is created
LPS-32377 Indent password policy options in password policy creation/edit form