definition user {}

definition vendor {
   relation viewer: user
   relation parent_tenant: tenant
   permission view: viewer + parent_tenant->viewer + parent_tenant->vendor_view
}

definition tenant {
   relation viewer: user
   permission view = viewer
   permission vendor_view: user
}