yeah that's basically the approach that our organization went with. it feels like a little bit of a sledgehammer to crack a nut, especially since all of our roles are (currently) statically defined in code, but it demonstrates how SpiceDB modeling is at least flexible enough to encompass this 🙂