Organization user admin requires site wide `user read` permissison, this needs to be removed

`Organization User Admin` fails unit tests without `user read` permissions. 

https://github.com/coder/coder/pull/13938/files/2ab3be7e9f6da16ed5d78f7ac59ca6fcc77710de#r1684473864


Also ensure `Organization Template Admin` can use the `/permissions` page on a template without said perms.