you can link a permission in tenant to the relation in vendor