it's the google iam schema template, so yes to intersections but they're on role definitions which should be relatively cheap