TIP: import the Access Role record before the Access Control record, otherwise the system may add "snc_internal" to the "Requires role" list.

NOTE: Remember, always a good idea to try it out in your company's development instance first, or better yet, your own personal development instance.