As an OpenShift cluster admin, I want the CMA operator to run only with the permissions it needs and not extra permissions. I would like OLM to create and mange the roles, role bindings and service accounts needed for the CMA controllers so that the CMA operator doesn't need permissions to manage those objects.