This "user defined roles" article would be useful in the docs (at least as a link), it's what gave me confidence that SpiceDB could functionally handle whatever future requirement would get thrown at me 😄