Create a read-only admin role for reading repository permissions (API)

Create a separate role that allows the user to view the admin settings, but not change them.

This would be useful for any situation in which users need to view admin-level settings for monitoring, and would remove the security concern of using a global admin account for this purpose.