This is useful to have as we probably want a generic app to have less influence than a typical admin role. Also one step towards having extra accounts for apps instead of using only the one existing default admin account.
Related to #370