Application administrator to manage Genesis
in the current set up a user must be a real administrator to manage Genesis settings and instances. it would be helpful to create a security role to do this, so Application Administrators (not an administrator which bypasses most of the security) can manage settings and instances
