this would be like having owner/admin/member on a group which can do operations on the current group (or any below), which would mean I should use the latter with

parent: group

?