Thanks @Joey with you change I see it works works with

"document:doc1#document_manage@user:ron"

but this means I have to enter all document ids in relationship. My question is it possible to have every user which has permission manage_document should be able to access any doc without entering each doc id in spicedb relationship