Allow serviceaccount to create project resource on Openshift 3.x

Issue

• A serviceaccount with self-provisioner access is blocked from create project.
• Is there any advise whether there are any existing cluster roles (other than cluster-admin e.t.c) which would allow this? If not, please advise how we'd go about creating a new cluster role for this operation.
• Permission denied while trying to create a project with a service account
  oc new-project abc

Error from server: You may not request a new project via this API.