Add Project Type to Project Role and allow multiple default project roles on a user account

Add Project Type to Project Role and allow multiple default project roles on a user account

There are many ways we'd like to expand the project module.  On of the most basic issues we'd like to work on is the permissions side of things.

We have multiple business areas using Service Desk. 
HR, Continuous Improvement, IT, etc.

Our CI team wants to use the project module to manage projects, and allow all users to see all CI projects.
Even though we have a project type for CI, I can't set up permissions how they want.
In order to grant all users view only access to CI projects, they'd also get access to all other project types, including IT And HR, which isn't what we need, and we probably can't do.

If you have other suggestions of how we could achieve our goal, please share!

Here's what I propose:
Project Role:
Add to the Project Role set up screen a multi select field where all or specific project types can be selected. 
Here's a mock up:


User Configuration:
The other part of this would be that all our users would need to be assigned with a role to allow view only access to the Continuous improvement projects, but they might also need a real project role assigned.
So they could have view only access to CI Projects, but still be a project manager by default on other projects that are assigned to them.

Mock up:


                  New to ADSelfService Plus?