Create users profiles. Define elementary rights.
Define habilitations depending on the projects typology. Mix habilitations for your polyvalent users. Allocate automatically "statutarian" rights.
Define profiles typologies depending on their work (project manager, MOA, team member, etc.) Define monitoring roles (member of monitoring committee, member of project committee, MOA, etc.) Allocate rights depending to their place in projects and users.