Assign user groups and courses to admin roles

There should be an admin role setting that allows any user with the given role access to specific courses or user groups. The admin role settings would override the department set in the user profile.