if your goal is to grant a "global" role, its generally recommended to link every resource to a

platform

and put the user on that