Administrative roles support - EUCA-8164

Roles can now be created in the eucalyptus account for administrative
purposes. Policies associated with these administrative roles have
permission to access resources across accounts.

EUCA-8164
Merge remote-tracking branch 'origin/dev/sjones/EUCA-8164' into testing