Access control: hide team role picker if user doesn't have access to it (#45068)

* hide team role column

* hide or disable the role picker as needed

* add SWL filtering for role listing

pkg/services/accesscontrol/filter.go

@@ -11,6 +11,7 @@ import (
 
 var sqlIDAcceptList = map[string]struct{}{
 	"org_user.user_id": {},
+	"role.id":          {},
 }
 
 var (