Yes, like you said Peter, if it is a private instance and you would like the viewer role in each site to be able to use the measurement tools, you have to modify the permissions in each site. The whole user management logic is redesigned on a multi-site bases, each site is considered as an individual entity. That's why the permissions are all single site based.