if a user is assigned in sphere model, and down the hierarchy also. for a particular platform , i dont want that user can also have this access to the platform to the sqaure