if the roles are finite and a user's role doesn't change often, this can be done by setting up the hierarchy in SpiceDB