yep, if you want to do things bidirectionally. Just be VERY careful when defining your permissions that you don't form loops