I really think this favours bad behaviour (ProviderA: admin has xz and xy rights, ProviderB: admin has only xz rights)