if you mean to have

member

include members and admins, you'd do:

definition usergroup {
  relation admin: user
  relation direct_member: user
  permission member = admin + direct_member
}