yeah, it ensures a clear distinction between a relation for objects (like a role in RBAC) and how permissions are computed based off of those relations/roles