Add provisioning service + move setting access rights to API services