if you use the

member

as a permission you can do something like this:

definition business_unit {
  relation direct_member: user
  relation account_manager: user
  relation sales_director: user

  permission member = direct_member + account_manager + sales_director