Restrict content access by term reference in profile
Turns out I went with Access by Terms module after finding that the Term Access module did not work for me.  Access by Terms also has permissions the make the field editable by certain roles in the profile and nodes, so that takes care of administration requirements too.