I am guessing there is something I can add on the line like permission read_logs = admin + assigned_user Is that the right path?