add a permission called

permission member_or_admin = member + admin

then call LookupResources on it