Additional AGIC RBAC

[Gordonby]

As per this additional security check,

We need to enhance the role assignments that are made for the AGIC identity.

[github-actions]

Issue smells stale, no activity for 30 days. Stale Label will be removed if the issue is updated, otherwise closed in a month.