Document RBAC for cbopinfo

We define the minimum requirements for the operator and users, but pay little attention to log collection, which needs access to all that the operator does.