Currently, instance and project role rules (Settings → SSO) can only be created and managed via the UI.
It would be very helpful if these rules could also be managed via the CLI/API to automate project access.