As a manager of multiple research groups, I'd like the ability to view associated projects & allocations without having to be added to them

[dsajdak]

We have a "customer" that we provide a large amount of computing and storage to that manages many different faculty research groups. They have a research computing facilitator that helps them manage their projects, allocations, and onboards them to the systems. This RC facilitator wants to be able to see all the associated projects and allocations for their various groups but doesn't want to be added to all of them. Getting added to many allocations may also add this person to many unix groups or slurm accounts and this may not be desirable. We would not want to give this account permissions such as "view all projects" because then they could view everything in your ColdFront instance. We need a way to restrict the view to only certain projects and the allocations on them. This may be accomplished with a new role or perhaps we can leverage the forthcoming project attributes feature.