Add admin operator permission lookup to services

Also add a built-in function to all services to check
if a given user is an admin for that service.