@User if the roles are predefined (i.e.

role_manager

is a defined Github role type), and its per user per repo, you can do something like this: https://play.authzed.com/s/Ci8GGHHCNeg3/schema