Provide the ability for Team managers to manage (create/delete/modify passwords) machine accounts via the UI/api

[johnaohara]

[barreiro]

I propose to add an user role MACHINE to signal what accounts can be managed this way.