<@!821528374077292556> here is what I put together...
# spicedb
@User here is what I put together for the GH roles on Friday: https://play.authzed.com/s/rpYDbP71jJ_V/schema. This allows for roles to be granted permissions, and then a role to be granted for a specific user on a repo. You may be able to adapt it to your needs.