On our install "Can Create Spaces" is limited to "Administrators". However, when creating a space, the admin can only select his own projects for the "Visible To" policy. Thus he effectively cannot create Spaces for projects he is not a member of. This could be worked around by temporarily joining a project. Unless the project has limited "Can Join" to also not include the admin…
This is a usability issue without an easy workaround.