Kaushik,
You need to maintain org values alone in derived role and yes you need to create authorization and profile but you no need to enter any other values in derived role where you can centrally maintain the menu structure which can be pushed to all child roles.
But there is no other ways to do it.
Regards,
RK