definition user {}

definition group {
  relation member: user
}

definition organization {
  relation group: group
  permission view = group->member
}