sure - that can either be expressed through writing a relationship when a user is created or through wildcard permissions on the "default" resources to express that anyone in the system should have access to them