I am administering a Data Centre instance of Bitbucket.
The challenge for us, is being flexible enough to facilitate different use cases regarding project / repo access.
Our basic strategy is to grant admin access at project level (AD groups) and read/write access groups.
We are looking for an Atlassian resource to assist with refining this model and allowing more flexibility.