The root ARN of the account, an organizational unit (OU), or an organization ARN. If left empty, the default is account.