provider_admin can perform any operation on a specific Provider.
installation_admin can perform any operation on a specific Installation.
project_reader can read all entities related to the Project it will be applied to.
project_admin can perform any operation on a specific Project.