As a LokiStack administrator, I want to allow access to the application logs only for a dedicated group of cluster-admins, so that I can control who is eligible to search application logs regardless access to projects.

Acceptance Criteria

• The administrator can define which cluster-admins' group(s) have access to the application tenant logs.
• The administrator can still provide access to the workloads' namespaces for cluster-admins' to inspect other resources.
• The cluster-admins' group(s) not listed by the administrator cannot see logs in the Observe Aggregated Logs view.

Developer Notes

• TBD
•