[Permissions] Disable Admin functions via Permissions

[briddell]

If something is visible from the Admin Tab, we should be able to disable it from Permissions. 

Currently if you create an Admin role called Advisor, and give that role No Permissions, the Advisors still have items that show up on their Admin Menu.

For example, at our university, an Advisor can see:

Attendance

Badgr Analytics

Canvas Data Portal

Dropout Detective

Settings

In our case, we only want our Advisors to be able to access Dropout Detective.

The way Canvas interfaces with Dropout Detective is that the advisor needs to have an Admin role.

All these other permissions are unsightly and confusing as they error out when the user clicks on them.

This is not a security breach that we have been able to determine, but if something shows up on the Admin Tab, we should be able to disable it from Permissions.