Presumably you would start your query from the org, e.g.

definition organization {
  relation member: user // beth
  permission do_an_expensive_thing = member
}