As a LokiStack administrator, I want to allow access to the application logs only for a dedicated group of project-admins, so that I can control who is eligible to search application logs regardless access to projects.

Acceptance Criteria

• The administrator can define which project-admins' group(s) have access to the application tenant logs.
• The administrator can still provide access to the workloads namespaces for project-admins to inspect other resources.
• The project-admins' group(s) not listed by the administrator cannot see logs in the Observe Aggregated Logs view.

Developer Notes

• TBD
•