Instance/project role rules managable by CLI/API

Currently, instance and project role rules (Settings → SSO) can only be created and managed via the UI.

It would be very helpful if these rules could also be managed via the CLI/API to automate project access.