definition user {

}

definition resource_platform {
    relation admin: user
}

definition resource {
    relation resource_platform: resource_platform:'somestaticplatform'
    relation admin: user

    permission can_manage = admin + resource_platform->admin
}