definition user {}

definition persona {
    relation user: user
}

definition division {
    relation persona: persona
    permission view_resources = persona
}

definition resource {
    relation division: division
    permission view_resource = division->view_resources
}

with the idea that a "persona" id is the concatenation of the user and the division or something like that