Team - How to provide permission on all resource instance , rather then doing it for a specific identifier