that's why you can use it to "downscope" the user ...
# spicedb
j
that's why you can use it to "downscope" the user identity