Fixes #5521: Adding permissions for managing subscriptions and manifests.
Merge pull request #4042 from ehelms/fixes-5521

Fixes 5521: Adding permissions for managing subscriptions and manifests.
Fixes #5531: Wrapping sync controllers in with new permissions.