The auditor role should be able to view VSA analytics
of a group they are not a member of, as per our docs.

Changelog: fixed
EE: true