SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical application permissions.

SpiceDB

Hi, I have a virtual machine definition, and it can be either a regular VM or a service VM. Is it possible to write the definition in such a way that regular permissions are used for a regular VM and service permissions for a service VM?

```
definition regularVM {
  relation reader: user
  permission read: reader
}

definition serviceVM {
  relation reader: user
  permission read: user
}

definition organization {
  relation vm: serviceVM | regularVM
  permission access: vm->read
}
```