Allow ldap "nda" users to access ishmael

also users in the "ops" group (for consistency)

Untested

Change-Id: I9853b77a8f2b38f3aedc6c2c82a279f7510ed255
Merge "Allow ldap "nda" users to access ishmael" into production