The auditor role should be able to view repository analytics
of a group they are not a member of, as per our docs.

Changelog: fixed
EE: true