[designate-nanny] adding designate-global permissions for designate nanny user

[mutax]

This gives the configured designate nanny user in the Default namespace the cloud_dns_viewer role in the global namespace.

This follows role assignments for the other users and should enable dumping the dns zones there as well for backing them up.