i don't know that there's a good way to phrase "what permissions are on a role" entirely within spicedb