Use the contrib entity access and permission_provider handlers for the tag_type config entity.

modules/core/id_tag/farm_id_tag.managed_role_permissions.yml

@@ -0,0 +1,3 @@
+farm_id_tag:
+  default_permissions:
+    - view tag_type

modules/core/id_tag/src/Entity/FarmIDTagType.php

@@ -11,8 +11,10 @@ use Drupal\Core\Config\Entity\ConfigEntityBase;
  *   id = "tag_type",
  *   label = @Translation("ID tag type"),
  *   label_collection = @Translation("ID tag types"),
- *   handlers = { },
- *   admin_permission = "administer site configuration",
+ *   handlers = {
+ *     "access" = "\Drupal\entity\EntityAccessControlHandler",
+ *     "permission_provider" = "\Drupal\entity\EntityPermissionProvider",
+ *   },
  *   entity_keys = {
  *     "id" = "id",
  *     "label" = "label",