Export with instance level permissions

I am creating an extension, and would to include instance level permissions - the organization and user groups exist in all environments, but this detail is not included in the xml during export.

I attempted to manually add this detail in the xml, which imported without complaint but the permissions appeared to be ignored.

Is there a better option to include permissions when creating an extension, or does this need to be set in the target environment?