at my old company we solved it with a "platform" o...
# spicedb
y
at my old company we solved it with a "platform" object that has a reference to all objects in the system