How do I create a "Create" access policy restriction

Help
1

This is the Schema.

  1. company (Parent collection)

  2. project (Collection to be restricted)
    Has a Many-to-One relationship to company via the field: company_id.

  3. company_membership (Junctiontable) (Collection to be restricted)
    Links company and directus_users. It defines the user’s role in the company via the field: role (possible values: admin, subadmin, member).

What I want to accomplish?

  1. Only Company admin should be able to create a project, Company subadmin, member shouldn’t have access to Create a new Project.

  2. Only Company admin should be able to create company_membership. Currently any role (admin, subadmin, member) can add new company_membership