According to the error you are getting is because you are trying to place a rule on top of the AppRF rules
You won't be able to move the "global-sacl" and the "Apprf-<ROLE-NAME>-sacl"
For example in this role I can't move the allowall above those other two rules.
So your first rule will have the position #3 for any user-role.
If you are trying to place your rule on any position other than 1 or 2 and is giving you that error then you may need to open an Aruba TAC case.