Gc-provider 400 on screen_recording_policy via Terraform

Looking for advice on provisioning screen recording policies via gc-provider v2.0.8. Pipeline fails with 400 Bad Request on /api/v2/screen-recording/policies despite valid HCL.

“The policy configuration must include a valid retention period and associated user group IDs.”

Payload passes schema validation but GC rejects it. Any known constraints on group ID format?