If we were to represent it through

resourcetype

, we'd have to take all permissions of all resource types, and make them available on the "resourcetype" definition