Zanzibar/SpiceDB doesn't separate Users and Objects into their own graphs. Zanzibar had a concrete integer that represented a user/bot and SpiceDB allows you to treat any object as a subject so that you can check permission at any point along a path in the graph.