When uploading a SSH public key to a project, the admin can select the whether it's for read-only or read-write access.

If access type for a given key ever needs to change, the key needs to be deleted and reimported rather than simply being edited.