@User here is what I put together for the GH roles on Friday: https://play.authzed.com/s/rpYDbP71jJ_V/schema. This allows for roles to be granted permissions, and then a role to be granted for a specific user on a repo. You may be able to adapt it to your needs.