I want to create a server-wide login permission in my Managed Instance which would allow the user to change server-wide configuration options and shut down the server. You should apply the principle of least privilege, and not give more privileges than the user needs. What role should you use? Which permission should I use?