SERVER-9514 Split up clusterAdmin role actions into three new more-specific roles