Webterminals: Missing permission when trying to run garden cluster terminal as enduser

[petersutter]

What happened: Trying to run a garden cluster terminal as enduser will fail if the dashboard-webterminal service account does not have the Service Account Manager role

What you expected to happen:

How to reproduce it (as minimally and precisely as possible):

Anything else we need to know:

Environment: