https://authzed.com/blog/user-defined-roles/
* Every time a resource instance is introduced , we need to associate the role with the instance.
* Every time we need to add or remove a permission for a role , all existing association with a resource instance this has to be modified.
Is there a way around this ?