one permission which is "viewable either directly ...
# spicedb
j
one permission which is "viewable either directly or through the org"