This does not solve the problem.  My payroll manager still does not have access to Manage Cloud Services unless I give her full admin permissions, which is not what we want to do.  

Our payroll manager already has "full" permissions under the Payroll module.  How do we enable our managers to have access to Manage Cloud Services without making them an Admin or External Accountant role?