[Catalog] Granular subcatalog admin permissions

[rpsloan]

Problem statement:

We have parent subcatalogs that have admins that manage it and the child subcatalogs underneath it. It would be great if these subcatalog admins can have a view-only permission to see who are the admins in their parent and subcatalog sites. Another issue we have had is that those who need API access need to be added via the root catalog, even if they only need API access for a specific subcatalog.

Proposed solution:

Allow Catalog root admins to provide granular permissions for subcatalog admins. Allow view-only permission to see the Subcatalog admins pages and only show admins on their catalog level and below. Allow a permission for subcatalog admins to have API access only to their subcatalog so a root admin would not have to give them access via the root Catalog.

User role(s):

admin

[rpsloan]

I'd like to add to this idea that if a user is added to the root catalog but does not need full access, provide ability to only give them specific permissions (view-only, API access, etc.)