Minor update, just was able to export the root policy using GET request to https://IQ_URL/rest/policy/organization/ROOT_ORGANIZATION_ID/export
From the UI there is an import that triggers POST to
https://IQ_URL/rest/policy/organization/ROOT_ORGANIZATION_ID/import?timestamp=linux_timestamp_var