Joel

Also can't call `/api/v1/project` without `ACCESS_MANAGEMENT`. which seems bizarre, neither can you upload SBOMs/create projects without it. Which feels like the permissions model is not quite right... Should I create...

> [@ch-joel](https://github.com/ch-joel) Do you have the "Portfolio Access Control" feature enabled? `ACCESS_MANAGEMENT` is the only permission that bypasses access checks (it's effectively _the_ admin permission), users/teams without this permission need...

I've disabled the Portfolio Access Control and I have been able to remove `ACCESS_MANAGEMENT` fine.