Issue: MASCORE-11368

Description

From 9.1, we cannot assign entitlements
We need to create initial primary users with below access

• Authorized
• Given access to the USERMANAGEMENT security group
• Remove access from the applications' default admin groups (they can add themselves later if they want to)
• Access to API Key Management and IDP Management
• CRITICALLY give them "authorize group reassignment" to every security group there is, so they can manage users properly

Testing

Tested in noble8 cluster

Primary in 9.1