On our install "Can Create Spaces" is limited to "Administrators". However, when creating a space, the admin can only select his own projects for the "Visible To" policy. Thus he effectively cannot create Spaces for projects he has not joined. This could be worked around by temporarily joining a project. Unless the project has limited "Can Join" to also not include the admin…
This is a usability issue without an easy workaround.