proxy: ROLE_MOD_ANALYTICS grants access to analytics + ROLE_MOD_LDAPADMIN to ldapadmin - closes #216