Add set of Canvas-specific account level roles to base settings file - since the roles are tied to the instance of Canvas, putting them in settings allows the possibility of having different roles per instance.  Update section views to enforce some account level admin roles instead of just relying on the LTI "Administrator" role.