ENG-13996 - HR admin permission set provisioning

- source :: https://15five-dev.atlassian.net/browse/ENG-13996

Journal

- Note taken on Wed Dec 9, 202017:39

Started to work on this, but João Guerreiro pinged me to see if he could grab it tomorrow morning. I noted that I don't think it depends too much on ENG-13995 due to the need to probably build out an actual function for setting `is_hr_admin` so we can add the auditing and notification logic. Once that function is written, it could be backported into the profile form logic that is in the other ticket.

Description

Account admins can provision this permission set to a user - this triggers a

security audit, and a notification and an email (text TBD) is sent to the user

that their permissions have been elevated.

[[https://www.figma.com/proto/hmdeY0HdwpoOtwG8ii8sIv/People-Attributes?node-id=1851%3A0&scaling=min-zoom][Figma Link]]

Development Notes

1. Only account admins and HR admins can provision this permission set