Permissions by profile type

Problem/Motivation

Right now there are only high-level view/create/edit/delete permissions for all profile types. I would like to create a role that only has view access to a single profile type.

I believe there is a helper class, either from core or the contrib entity module that provides these bundle permissions.

I'm not sure if this class would introduce a change for the existing view/create/edit/delete permissions... they may change to "view all profiles" not "view profiles".