add tgr to admins::bastion

for bastion host ssh access

RT #7506

Change-Id: I5da583c0cfbdc5871e60bbf0dc18dbf5bad6de13