hi @User you'd represent it as a relation on the resource to "remove" access