Treat admins and regular users differently

[achilleas-k]

An admin can view the job log of all users.

Not entirely sure how to separate them. Perhaps it can be based on a function so that each service can define it's own rules. For instance an org owner might be a service admin, or it might require a GIN site admin.