Allow support_team access to run sandbox refreshes