Handling of deployments:
Create new Resource "Deployment" with permissions CREATE, READ, DELETE.
The Create permission can only be used with resourceId = * and means "the identity is authorized to deploy".
When a new deployment is created and we have an authentication, then a READ/DELETE authorization is created for the currently logged in user.

Handling of Process Definitions (and process definition related resources)
READ on Process Definition

Handling of non Process Definition Resources
READ on Deployment