Add a flag to conditionally display dashboard administration

The commit messages contain more detail.

It's worth noting that if this permission is removed in Signon while a user is logged in, their session will have to be expired before their permissions change. I believe this is the same behaviour as all our other permissions stuff.