Thanks a lot for the answer! A follow up question regarding the google iam model: How would you list the employees binded to a role? And also, the permissions a role has? Would you query the spicedb directly or would you rather keep this data kinda of cached in another db for an easier query (risking it not being consistent with spicedb)?