that's why i'm wondering if i'm asking the wrong question, or if there's another way to phrase that an admin should broadly be able to access things across the platform while still retaining the same behavior/characteristics around reading from my db and then filtering according to access vs listing resources and then filtering in my db accordingly