Global permissions module: defaultGrants "all" doesn't consistently work

This bug, fixed as JRACLOUD-80068, was reintroduced as part of mitigation of the incident Global Permission granted to users after app upgrade.

Issue Summary

our app (https://jxl.app) uses global permissions, and relies on

"defaultGrants": ["all"]

to be available right after installation. Unfortunately, this doesn’t work consistently; customers keep reaching out to us because the global permissions aren’t set correctly.

Please treat this with priority, as this is a major roadblock in our funnel.

Steps to Reproduce

hard to reproduce

Expected Results

Global permissions set correctly right after installation

Actual Results

Global permissions sometimes aren't set correctly

Workaround

Configure the permissions manually