vm_qs_for_admins: Check for cluster permissions

Factored out checking for cluster admin permissions into a new function.
Re-used in vm_qs_for_admins

refs #14877