definition platform {
    relation client: tenant
    relation members: user
    permission can_access = members + client->can_access
}

definition tenant {
    relation advertising: ad_account
    relation members: user
    permission can_access = members + advertising->can_access
}

definition ad_account {
    relation branding: brand
    relation members: user
    relation tenant: tenant

    relation viewer: user
    relation planner: user
    relation approver: user
    relation admin: user

    permission can_access = members + viewer + planner + approver + admin
    permission can_view = viewer 
    permission can_plan = planner
    permission can_approve = approver
    permission can_admin = admin
}

definition brand {
    relation modules: module
    permission can_access = modules->can_access
}

definition module {
    relation viewer: user  // Directly assign users to modules
    relation planner: user
    relation approver: user
    relation admin: user

    permission can_view = viewer 
    permission can_plan = planner
    permission can_approve = approver
    permission can_admin = admin
    permission can_access = can_view +can_plan + can_approve + can_admin
}

definition user {}