Talk:Personal Address Manager Service
After a bit of thought, I've removed the AltarnateServiceProvider and added an administrator.
The AlternateServiceProvider was initially there to provide a way for another PAM provider to request access to or export of the data. However, that is really just a delegation of functionality the Addressee has anyway, so it didn't need its own role.
The administrator, however, is specifically for those functions an administrator might perform that are not delagatable by others or which are admnistrator's rights regardless of delegated authority, such as account creation, account deactivation, account deletion.