so you'll want to setup a rank hierarchy with something like (needs better names):

definition rank {
    relation member: user
    relation parent: rank
    relation child: rank

    permission can_elevate_to_recursive = member + parent->can_elevate_to_recursive
    permission can_elevate_to = parent->can_elevate_to_recursive
}