From the add-on settings you can define a project role as configuration management role. It is set to none by default. Once you set this something other than None, members of this role can perform following operations even though they don't have project administration role: