fix(plugin-security): resolve the org-admin permission set per organization, and keep the revoke reach wide

fix(plugin-security): resolve the org-admin permission set per organization, and keep the revoke reach wide #28058