as in the above, if you had two `relation`'s,

editor

and

viewer

, you'd only grant the API token

viewer