Add option to push permission added to group to all existing projects in group

Currently it is very hard to update all existing projects when a new user is added to a group. Group `roles` are a template that all *new* projects inherit from, but any changes made to this list are not reflected on existing groups (as expected). Allow a way for site admins to "push down" permissions changes to all projects. 