`permission view = viewer + parent_tenant->viewer`...