would it make sense to create resource groups with cross graph relationship and include exclude as a function of user group and resource group more like create buckets and doing intersection. It might be then case of shifting relationships I guess