Within team 2 roles:
  - admin (to add users)
  - normal
Within project, 2 roles:
  - admin (set up repos, change provider config etc)
  - normal