Backport from havana 'shared' + 'router:external' nets for non-admin role users to use
Verified with fab run_sanity + manual tests
Merge pull request #48 from Juniper/hajay_shared_rext_c_g

Backport support for 'shared' and 'router:external' nets in grizzly