Allow type filters on global roles

Hillrom has a custom web application whose users have inventory roles to restrict their access to devices of their organization. The same users require access to a number of global inventory objects (namely those in the configuration repository).

If global roles supported type filters just like inventory roles, this would be easy to achieve without giving these users full access to the inventory.