ENG-6856: allprocs role.

Maybe it's worth adding some tests to make sure this user can't call RW sysprocs and adhocs.